SpywareWatchdog/articles/iron.html

193 lines
13 KiB
HTML
Raw Permalink Normal View History

2020-07-25 12:33:15 +03:00
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
2020-06-04 04:22:07 +03:00
2020-07-25 12:33:15 +03:00
<head>
2022-04-21 12:16:26 +03:00
<meta http-equiv="Content-type" content="application/xhtml+xml;charset=utf-8"/>
<title>SRWare Iron — Spyware Watchdog</title>
<link rel="stylesheet" href="../style.css"/>
2020-07-25 12:33:15 +03:00
</head>
<body>
2022-04-21 12:16:26 +03:00
<div class="case">
<div class="nav"><a href="index.html">&larr; Catalog</a></div>
<div class="main">
<img src="../images/srware_logo.png" alt="SRWare Iron Logo"/>
<h1>SRWare Iron</h1>
<p>
SRWare Iron is a free web browser, and an implementation of Chromium by SRWare of Germany.
</p>
2020-07-25 12:33:15 +03:00
<h2>Spyware Level: <span class="red">EXTREMELY HIGH</span></h2>
<p>
SRWare Iron claims to be a privacy respecting web browser that is an alternative to <a href="../articles/chrome.html">Google Chrome</a>'s
spyware, and specifically brands itself as a privacy respecting web browser that aims to give users
2020-07-30 14:34:56 +03:00
the Chrome experience without Google's spyware. However, when examining this program, these claims
2020-07-25 12:33:15 +03:00
instantly melt away. SRWare Iron connects to an absolutely incredible amount of trackers and opens
2020-07-30 14:34:56 +03:00
connections to an enormous amount of servers on its first run. It racks up a rough estimate of
<b><font color="yellow">~400-500 unsolicited connections</font></b>, and it actually took several minutes for it to stop making new
requests and connections. SRWare Iron uses the spyware search engine <a href="../articles/bing.html">Bing</a> as its default search
engine, however it goes beyond that and routes your requests to Bing through its own servers
2020-07-25 12:33:15 +03:00
so that it can spy on your internet searches as well. The bottom line is that this browser is just
another false privacy initiative and is really <b><font color="red">no better than Chrome.</font></b>
</p>
<p>
2020-07-30 14:34:56 +03:00
Version 69.0.3600.0 of SRWare Iron was tested on Windows 7 64-bit. MITMproxy, Microsoft Network Monitor 3.4,
2020-07-25 12:33:15 +03:00
and Sysinternals ProcMon were used to monitor the behavior of this program.
</p>
<h3>False Privacy Initiative</h3>
<p>
2020-07-30 14:34:56 +03:00
SRWare Iron claims on its website that it is:
2020-07-25 12:33:15 +03:00
</p>
<p><i>
2020-07-30 14:34:56 +03:00
"Chrome thrilled with an extremely fast site rendering, a sleek design and innovative features. But it also gets critic from data protection specialists, for reasons such as creating a unique user ID or the submission of entries to Google to generate suggestions. SRWare Iron is a real alternative. The browser is based on the Chromium-source and offers the same features as Chrome, but without the critical points that the privacy concern."
2020-07-25 12:33:15 +03:00
</i><sup><a href="#s1">[1]</a></sup></p>
<p>
The reality is that you are merely trading in one spyware product for another. Where Chrome's spyware has been removed,
2020-07-30 14:34:56 +03:00
Iron's spyware is there to replace it. Which poison are you going to pick? The worst part is that people will read what is
claimed on SRWare's website and believe it without doing any tests for themselves. Like
2020-07-25 12:33:15 +03:00
<a href="https://dottech.org/23821/srware-iron-a-privacy-oriented-web-browser-built-from-google-chromes-source-code/">this article</a>
<a href="http://web.archive.org/web/20160327201202/http://dottech.org/23821/srware-iron-a-privacy-oriented-web-browser-built-from-google-chromes-source-code/">[web.archive.org]</a>
2020-07-30 14:34:56 +03:00
that just copies the comparison-list from Iron's website without any real investigation before declaring it a privacy alternative to Chrome.
2020-07-25 12:33:15 +03:00
The most audacious thing about it is this incredible quote on the FAQ section for the Iron browser:
</p>
<p><i>
"Can i really check that Iron doesn't submit any private data, how you say? Yes, you can. There are tools like Wireshark, which scan the whole network-traffic. We could not recognize any obvious activity. But you can proof this by yourself."
</i><sup><a href="#s2">[2]</a></sup></p>
<p>
Which is just an amazing gem in the context of what is actually found when running tests on the software.
</p>
<h3>Massive amount of connections on first startup</h3>
<p>
When you first start SRWare Iron, it will immediately open the following two pages: <code>https://iron.start.me/us</code> and
<code>https://www.srware.net/en/software_srware_iron.php</code>. The most offensive page is the <code>start.me</code> domain
which begins loading in an enormous amount of spyware from all over the internet. I did not count the specific amount of requests
but it was somewhere in the 400-500 range (my software doesn't provide a great amount of automation... or maybe i'm not using it
as well as I could). This <a href../images/iron_spyware.png">image</a> (at 1.06 MB- almost 1/4 of the size of the entire site as of writing!)
should give you an idea of the amount of requests I was swamped by. It took a while for it to die down. On subsequent runs the
amount of requests it sent was far less. It connected to spyware platforms like Google Analytics and Piwik, and executed their JavaScript payloads.
There were a lot of redundant connections to Google Analytics so it's probable that multiple companies are able to send their own
2020-07-30 14:34:56 +03:00
analytics payloads through this homescreen. Thus thoroughly fingerprinting and profiling your web browser and computer the moment you
begin browsing the internet with your new "privacy respecting" browser — so that all of these advertising companies can track you
2020-07-25 12:33:15 +03:00
everywhere you go!
</p>
<p>
When checking the browser's connections in Network Monitor 3.4, you could see that it connected to a huge amount
2020-07-30 14:34:56 +03:00
of servers, even though only two domains were ever contacted. <a href../images/iron_connections.png">This screenshot</a> doesn't capture
2020-07-25 12:33:15 +03:00
all of the IP addresses that it connected, but should give you an idea.
</p>
<p>
And just so that there is no ambiguity, this notice is shown when you load this homepage:
</p>
<p><i>
"We use cookies to personalise content and ads, to provide social media features
and to analyse our traffic. We also share information about your use of our site
with our social media, advertising and analytics partners who may combine it
with other information youve provided to them or theyve collected from your
use of their services."
</i></p>
<p>
Just so that there is no doubt- you are being served tracking cookies by advertising companies.
</p>
<h3>Redirecting of internet searches through developer's domain</h3>
<p>
After you've finished identifying your web browser to just about every single spyware company on the internet, you can begin
making internet searches with your new SRWare Iron browser. The default search engine is the spyware search engine <a href="../articles/bing.html">Bing</a>.
2020-07-30 14:34:56 +03:00
However, it's not enough to just point you at a spyware search engine... when you try and actually run a search on Bing, this is what happens:
2020-07-25 12:33:15 +03:00
</p>
2020-07-30 14:34:56 +03:00
<img class="screenshot" src="../images/iron_bing.png" alt="SRWare Iron redirecting through its own servers">
2020-07-25 12:33:15 +03:00
<p>
Basically, every time you make a search with this browser, your searches are sent through the developer's servers.
So, the developer can know exactly what your internet history is, in this way. Your searches are also being sent through
<code>wisesearches.com</code>, but I don't know who they are. So now instead of giving up your search history to one
spyware company, Google, you can give it to three spyware companies, by switching to this browser. This is a very similar
tactic to the one that the spyware browser <a href="../articles/slimjet.html">Slimjet</a> uses, where it routes searches to
2020-07-30 14:34:56 +03:00
Bing through its own domains.
2020-07-25 12:33:15 +03:00
</p>
<h3>Motivations of the SRWare Iron developer?</h3>
<p>
If you dig deeper into how SRWare Iron was created, you can find some interesting information from some of the developers of
Chrome about the motivations behind the creation of this fork. More specifically this very interesting conversation:<sup><a href="#s3">[3]</a></sup>
</p>
<xmp>
<Kmos> Iron: why not contribute to it, instead of forking ?
<Iron> because i removed all privacy-related code
<Iron> e.g. RLZ
<Iron> and URL tracking every 5 seconds after start
<Iron> the original chrome is heavily communitating to google...i hate that
<jamessan> all of those are supposed to have options to disable them, iirc
<Iron> yes but they haven't options yet
<Iron> and nobody knows when the next beta is released
<jamessan> so work on getting the options added so they'll be there for the next release
<mgreenblatt> Iron.. why not propose a patch based on preprocessor defines that disables the sections you dislike without forking the code?
<mgreenblatt> (assuming such a thing doesn't already exist)
<Iron> because a fork will bring a lot of publicity to my person and my homepage
<Iron> that means: a lot of money too ;)
<Kmos> rotflol
<Iron> what means rotful?
<mgreenblatt> Iron.. you're a large corporation that can dedicate the time to support a fork of something as complicated as chromium?
<Kmos> Iron: google about it
<Iron> yes there is enough time to support it
<jamessan> heh, you're expecting to make lots of money from making a fork of chromium? that's quite amusing
2020-07-30 14:34:56 +03:00
<Iron> i don't take money for my fork
2020-07-25 12:33:15 +03:00
<Iron> but i have adsense on my page ;)
<Iron> a lot of visitor -> a lot of clicka > a lot of money ;)
<Kmos> and do you think google should support your fork
<Kmos> lol
<mgreenblatt> Iron.. it's always good to have dreams ;-)
<Iron> we are here in germany
<Iron> the press will love my fork
<Iron> i talked to much journalists already
<DrPizza> Why are you forking?
<DrPizza> to do what?
<Iron> to remove all things in source talking to google ;)
<jamessan> to get fame and fortune
<Iron> nobody here trusts google
<Iron> the german people say: google is very evil
<jamessan> yet you use google's adsense
</xmp>
<p>
So, this could explain a lot... the motivation for this web browser to exist was to monetize
privacy concerns by generating traffic to his website, where he could make money by serving spyware
to the very users that wanted to escape from it. Then his fork gets loaded up with all sorts of
spyware from all sorts of other companies... which he probably makes some amount of money from as well.
2020-07-30 14:34:56 +03:00
(why else would he take the time to integrate these things into his browser? We can only speculate.)
2020-07-25 12:33:15 +03:00
At the end of the day it's pretty clear that this browser is a huge scam and you shouldn't use it.
</p>
2022-04-21 12:16:26 +03:00
</div>
<hr>
<div class="footer">
<div class="sources">
<h4>Sources:</h4>
<ol>
<li id="s1">
2020-07-30 14:34:56 +03:00
<a href="http://www.srware.net/en/software_srware_iron.php">SRWare Iron: The Browser of the future — Overview</a>
2020-07-25 12:33:15 +03:00
<a href="https://web.archive.org/web/20181118232123/http://www.srware.net/en/software_srware_iron.php">[web.archive.org]</a>
<a href="https://archive.is/qMNlG">[archive.is]</a><br>
</li>
2022-04-21 12:16:26 +03:00
<li id="s2">
2020-07-30 14:34:56 +03:00
<a href="https://www.srware.net/en/software_srware_iron_faq.php">SRWare Iron: The Browser of the future — Frequently asked questions</a>
2020-07-25 12:33:15 +03:00
<a href="https://web.archive.org/web/20180502103925/http://www.srware.net:80/en/software_srware_iron_faq.php">[web.archive.org]</a>
2021-08-18 06:14:29 +03:00
<a href="https://archive.fo/TXJbh">[archive.is]</a>
<br>
2020-07-25 12:33:15 +03:00
</li>
<li id="s3">
<a href="http://neugierig.org/software/chromium/notes/2009/12/iron.html">The story of Iron</a>
2021-08-18 06:14:29 +03:00
<a href="http://web.archive.org/web/20180427094010/http://neugierig.org/software/chromium/notes/2009/12/iron.html">[web.archive.org]</a>
<a href="https://ghostarchive.org/archive/Vg0Re?kreymer=false">[ghostarchive.org]</a>
<br>
2020-07-25 12:33:15 +03:00
</li>
2022-04-21 12:16:26 +03:00
</ol>
</div>
<hr>
<b>This article was last edited on 11/20/2018</b>
<!--Dont change-->
<p>If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>.</p>
<p>All contributions must be licensed under the CC0 license to be accepted.</p>
<a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"/></a>
<!--Dont change-->
</div>
</div>
2020-07-25 12:33:15 +03:00
</body>
2020-02-08 10:09:18 +02:00
2020-07-30 14:34:56 +03:00
</html>