scratchandgame

You can’t blend in with a crowd of vanadium users with the amount of data points given away by the browser. Your fingerprint will be decernable from other users. Without actual anti-fingerprinting, which theoretical can allow for a crowd only when fingerprinting of user browsers results in the same fingerprint ID, the best you can hope to do is thwart naive fingerprinting. Vanadium doesn’t have any anti-fingerprint built in, so the slightest differences between user can be used to easily fingerprint. Vanadium

Anti-fingerprinting? By blocking javascript which the half-hearted privacy users can never afford? hahahahaha. Even privacy projects spread dirty javascripts.

(OP can ignore this comment)

I'm a bit upset that GrapheneOS does not follow OpenBSD: ignore any person hating it, ignore anyone who wants to interferes with project personnel and donations like usa is doing on Viet Nam like they are speaking for the Vietnamese, and don't care if the feature works "for you" or not, just going on code improvements & maximally free code. And do whatever Micay want to do. Accept donations from whatever company. There's so much dramas. But they already achieved over-detailed documentations. Focusing on unprivileged google play is the true path, since the demand on google play is much larger and other "private" apps repos are expected to work on the "privacy" people's phone.

Maybe because GrapheneOS haven't made any world-significant project that every companies depend on so that companies have to put so much money on the project.

This is the first time I saw you saying something correct.

Why would we allow an unregistered company to provide their service and affect registered companies.

It can also be used to extract metadata, which is used to attack someone in other ways or through other software or OS.

Threat model. Regular user aren't attacked this way?

And those exploits are features in Chromium browsers.

Nonsense.

Chromium sandboxing means nothing when it leaks so much data.

The attacker can't gain access to the host with javascript.

A browser that support javascript but doesn't have sandboxing might not leak these data but when their are bug in their js implementation, the attacker can gain more access to the host.

Also, security means nothing if privacy and anonymity are worse.

Security here is protection from exploits, bugs,...

the phone world is fucked. Use a landline phone :)