First release of gngr web browser

https://blog.gngr.info/v000.html

by digen • 12 years ago

44 32 12 years ago

blog.gngr.info

Interesting. The project page says that it "champions privacy" but I can't really see any details on how they plan to do that. There don't really seem to be any privacy-specific features mentioned.

A very brief look at the source code turns up mention of lobobrowser, a Java project that seems to have stalled about 5 years ago...

http://lobobrowser.org/

imjacobclark• 12 years ago

The fact that this is written in Java knocks it noteworthiness down tenfold.

feld2• 12 years ago

Write once debug everywhere.

I just can't take java software seriously these days. Sorry. It's not you, it's me.

feld2• 12 years ago

Would love those downvoting me to respond with a piece of java software they can't live without. I have zero. At my previous employer java software was banned. We did not lose any productivity or features.

I just searched through the FreeBSD ports tree's list of java software and I can't find any that I would ever need.

I can, however, say my experience with java software in the last 15 years has consistently been negative. Every vendor provided software product that was java based has been especially painful. A recent example: I'm looking at you, Ubiquiti. (Who also uses MongoDB which requires manual intervention for crashed databases -- unacceptable to not be using an ACID database)

SchizoDuckie• 12 years ago

- Focussed on privacy, how?

- So, it's a browser, got some screenshots? What's the ACID test score?

- What rendering engine does it run on?

- Privacy, but no https?

- It's an evolution of the Lobo project apparently?

xg15• 12 years ago

There are screenshots and some more information on their main site, https://gngr.info . Their approach so far seems to consist mostly of a process isolation architecture though. And a belief that Java is more readable that C.

hrjet5• 12 years ago

Thanks for clarifying, but a correction:

process isolation architecture

At the moment, it is module isolation rather than process isolation. It leverages the Security System of the Java Runtime.

Process isolation would help too but that's not on our immediate roadmap for lack of resources.

hrjet5• 12 years ago

Focussed on privacy, how?

Conservative defaults and easier to audit since it is implemented in a high-level language / runtime. The runtime (java) needs auditing of course, but that cost is distributed over many projects.

So, it's a browser, got some screenshots? What's the ACID test score?

For the screenshots you need to scroll down the home-page. ACID test score is probably zero; when we last tried it, it was failing catastrophically.

What rendering engine does it run on?

We haven't named it. It is a library inside the project. I believe the Lobo project wanted to spawn it of as a separate library called COBRA.

Privacy, but no https?

It does support https. The bullet point in the roadmap was not clear: we need to take it beyond "it works; let's ship". We need to properly configure the networking library (okhttp) with the correct cipher-suites and fallbacks, for example.

It's an evolution of the Lobo project apparently?

Yes, our credits page lists all the details: https://gngr.info/doc/credits.html

swombat• 12 years ago

Well, let's not be harsh before these guys even have a chance to get off the ground!

Nice idea. Very competitive space, hard to make a dent. Good luck, see you in a year or two!

hbbio• 12 years ago

Big goal.

Little details. Especially, the page doesn't even mention it's a fork of the Lobo project, http://lobobrowser.org which was halted a few years ago. Most of the implementation started before the focus on privacy (even not specifically to this project, mostly as a trend) and all commits in the GH repo seem related to the README.

hrjet5• 12 years ago

Yup, the credits page is not linked well (yet): https://gngr.info/doc/credits.html

The complete set of commits, spanning almost an year, from lobo code to the present gngr code is in this repo: https://github.com/UprootLabs/gngrPreHistoric

mrweasel• 12 years ago

Maybe I'm not getting the point of this, but wouldn't it be easier and better to fork Firefox or Chrome and strip them down.

If you configure Firefox to run in private browsing mode permanently and remove all the Google and Mozilla services aren't you pretty much there? Maybe add something random to the user agent to throw off sites using fingerprinting

hamai• 12 years ago

Sure it would, but isn't diversity a good thing too? Specially if you consider long term scenarios.

imaginenore• 12 years ago

Developing a browser from scratch is a pretty damn hard task. Keeping it safe and up to date is nearly impossible for a small team without funding.

In the case of gngr, it can't even render Reddit or Google.com correctly. Can you imagine how badly it breaks on more complex sites? Can you imagine how broken its core is?

Diversity is good, but it requires resources, lots of them.

quonn• 12 years ago

We should abandon this credo, just like we did the "all bugs are shallow" one.

There is quite some diversity, since unlike basically any other technology of comparable complexity there are already three fully independent browser implementations, with a fourth one (servo) coming. But they are not fully compatible and will never be, which is why every website has to be tested and adapted slightly for each engine.

Even more diversity will actually weaken the web as a platform, not strengthen it. So, no, it is probably not a good thing if taken too far.

And, besides, how likely is it that this particular implementation will ever come close to the existing ones in terms of compatibility? Highly unlikely.

sogen• 12 years ago

Also there's JondoFox https://anonymous-proxy-servers.net/en/jondofox.html

azakai2• 12 years ago

Maybe I'm not getting the point of this, but wouldn't it be easier and better to fork Firefox or Chrome and strip them down.

Not for the goals of this project, no. All existing browsers, including Firefox and Chrome, are large C++ codebases with histories going back to the 90's. This project wants to use a safer language, in this case Java - which would avoid the large amount of vulnerabilities we see in C++ codebases that are not possible in Java. The Servo project is writing a new browser in Rust for similar reasons.

It's true that running in private mode, disabling services and features, etc., can get you a lot of security in one sense. But there is another sense of security in which C++ is imperfect.

deeviant• 12 years ago

Java is a safer language?

Just having a Java interpretor installed on your system opens you up to untold security threats.

Honestly, it sounds a lot more like the majority of the software people on this project simply liked/knew Java, rather than made a informed choice of Java based on security considerations.

Not Java-bashing, it just the whole "C has pointers, pointers are not-safe, thus C is not safe, while Java has not pointers, and thus is safe."

Has somebody actually compiled statistics of the relative frequency of security threats in respect to language in which they were written.

hrjet5• 12 years ago

Lead of the project here; answering some of the common points raised so far:

Yes, it is based on the Lobo browser. You can find a complete list of credits here: https://gngr.info/doc/credits.html (The website isn't hyper-linked well, yet.)

A little background about our goals and motivations: https://gngr.info/doc/introduction.html

debacle• 12 years ago

Is it pronounced "Gengar?"

Always happy to see a new browser enter the fold. How is development funded right now?

hrjet5• 12 years ago

It is pronounced "ginger", the spice.

Currently, the development is sponsored by a for-profit company, and we plan to accept financial contributions to the project soon. We realize that backing by a for-profit company may not be perceived well for a project of this sort, but we believe that's currently our best option; it allows us to sustain the project through multiple avenues of income. Eventually, we would like to spawn it off as a non-profit when we have the bandwidth and the critical-mass.

GotAnyMegadeth• 12 years ago

I read it as Gungur for some reason. Not the best name if you want people to recommend it to each other by word of mouth.

cujo• 12 years ago

This might be the worst name choice I've seen in a long time. It's way to easy to pronounce this the wrong way.

calcol• 12 years ago

I'm kind of confused by the notion that Javascript execution times and CSS3 animations aren't part of the core functionality. I'm assuming they're not going to build their own JS JIT compiler and use v8 or spidermonkey. And while I don't see the necessity of animations, there's no reason to not put CSS3 as part of the core considering that every current major web browser basically supports its current form.

I do understand that the purpose of this browser is to be privacy-first, but what we don't need is a new browser that's just like IE6 in terms of bad web practices but with better privacy settings.

_delirium2• 12 years ago

They use a fork of Mozilla's Rhino JS engine, according to https://gngr.info/doc/credits.html

First release of gngr web browser

Related Stories