If possible (a.k.a if Apple allows this) please integrate Keychain with this browser.
I am not sure if there are many people like me, but I am using Keychain and it is the reason why I default to Safari and using any other browser it takes effort that I am doing, but I really wish Keychain could be integrated in other browsers too.
LE: It seems they already support this as stated in their FAQ/"How does Orion store my passwords?"
Yeah horses for courses I guess. I always try to use the cross-platform solution whenever I can but not everyone seems to care about that and are seemingly fine about being locked in.
I don't know if this is still true, but when I last used the native solution for saving cards and it always asked for the three digit code in the back of the card, which made it useless for convenience. I still had to look for my wallet.
1password and LastPass are smarter in that regard.
The third party solutions are much better regarding edge cases.
At least on Monterey, the macOS passwords system preference has import and export password set options built-in. The format is an unencrypted CSV file.
Firefox works with keychain in mac, there's specific settings you have to use. They seem to be considered enterprise features so they'r ehidden in the about:config settings.
When you open the browser website you find in the middle photo of HN on orion with uBlock as the only extension (as illustration of extensions support.
I moved from Safari to Firefox because if you're not using iCloud Keychain, the passwords Safari saves are not backed up properly with Time Machine: https://news.ycombinator.com/item?id=24626562
So I hope that, unlike Safari, Orion uses the Login rather than the Local Items keychain.
If Apple wants to tell everyone that they have to use iCloud Keychain for their Time Machine backups to work, they can do that, but Time Machine backups shouldn't silently not work, only to be discovered when you've lost your data.
The sales pitch for this browser is really well done. What is lacking is information about who made this, and why we should trust their claims. Seems important too me if privacy is the main selling feature.
> Orion is created by [Vladimir Prelovac][0], a tech entrepreneur with a track record of executing ambitious ideas that go beyond conventional wisdom. Orion was created in 2019, is bootstrapped by the founder and is being built by a world-wide passionate team.
> We are also building a privacy-respecting alternative to Google search, currently in private beta.
> If you'd like to know more or get involved, please feel welcome to reach out to vprelovac@kagi.com.
> Orion is created by [Vladimir Prelovac][0], a tech entrepreneur with a track record of executing ambitious ideas that go beyond conventional wisdom. Orion was created in 2019, is bootstrapped by the founder and is being built by a world-wide passionate team.
I have nothing against that guy, but it'd be nice to have more than a promotional self-description. Does he have a good individual reputation (e.g like Raymond Hill)?
He stopped working on it and gave it away to someone else, who promptly used it to raise "donations". This led him to decide to fork back the project under the name "uBlock Origin".
It's contentious. The new owner posted seemingly highly inflated estimates of costs for the project. Another issue is the new owner also removed any reference to the original developer, including in the project's Wikipedia page.
> Well... It's a pass from me. Anything claiming something is "think of the children" is at best facetious.
That's taking it too far. It's really good to "think of the children," it's just that we have to be mindful of when that's used as a smokescreen to distract from a particular policy's highly objectionable consequences. That kind of expression also has multiple senses (e.g. "children are vulnerable and must be protected" and "we should build a better future for our children to enjoy"). The people behind this browser may not have English as a first language, so they may not be able to precisely tailor their language to English very online sensibilities.
I was also thrown off by this line, but I interpret it as intending to improve the internet not through censorship, but promoting freedom (a long way into the future).
I don't see any mention of developer tools, but in case anyone working on this is here, that's something that would probably be interesting to the HN crowd. Since the home page has a screenshot of HN, I'm guessing devs are the target market.
It has ‘em (as seen in Safari). You can put the inspector button in your header bar through the customization menu and I think they’re pretty good.
One thing to note is that even with caching disabled in the dev tools it caches aggressively, which is why I don’t usually use it for development. But that’s why it’s a beta :-)
As a WebKit web browser, Orion ships with the same Web Inspector. You can disable resource caching from the "Network" tab, by clicking on the cylinder-looking icon in the right (it'll tell you that it disables caching if you hover over it.)
Some weird stuff, most issues are placed in the responsive mode.
They fixed some already, like the resolution selector not being working properly and etc. One that still annoys the heck out of me is the fact that when you right mouse click to re-open the inspect tool the window just selects whatever option it's above your mouse pointer (usually the print option...). One workaround is just keep the mouse pressed and select the option you want.
Brave is literally the only chromium brased browser (besides Chrome itself), on which dev tools work flawlessy.
I have (semi-daily) and would say it’s somewhat close to being day to day usable. They recently added Safari-style back and forth gestures and you can choose to arrange your tabs vertically (though not in a tree).
The main thing preventing daily driving is that it’s not in the App Store yet, leading to it not being selectable as a default browser. I also experience occasional crashes with hundreds of tabs open.
I loathe the new Safari “tabs”, with as much scare as you can get in those scare quotes. But, I still can’t leave Safari be, as I appreciate the history and Keychain sync with my iOS devices.
It’s that tight macOS/iOS integration that makes me stay on Safari, along with the relatively lighter energy usage versus Chrome. This looks nice in terms of using native UIKit elements (probably, it’s just screenshots) and probably the system WebKit, but I would really miss password syncing.
(Yes, I know, there are innumerable password sync options, but Keychain sync really does “just work” between iOS and Mac.)
The new Safari tabs are so bad that I’m sure they can’t stay that way for long. I was hoping I would get used to the broken active tab highlighting, but after a few days I’m still clicking the wrong tabs in the tab bar. I can’t believe it.
With the tradeoff of not showing you the title of the active tab, if I'm remembering correctly?
I tried it for a bit before that annoyed me into switching to the taller layout, which is a visual downgrade from the previous design but at least has the same information visible.
Long term Safari fan here. The new tabs have terrible UX but what's worse is stability. Whoever is "at fault" there - don't try to use jira with the latest Safari as it will crash eventually.
It’s successfully pushed me to Firefox. I love safari and how gentle it is on the battery but I’d rather have 6 hours of functional browsing than 10 hours of dealing with Safari’s nonsense.
Yep. I'm seeing weird bugs with e.g. middle-click-to-open-link-in-new-tab doing what it should—but then replacing it with the blank-tab content a quarter second after I switch to the new tab.
I'm not used to Safari being buggy. It's part of why I've stuck with it for years.
I'm actually kind of loving the tab groups—it's a little weird to me that we have that and the concept of a window, still, and the two are separate, but whatever—but the tab UI itself is really, really bad.
I use 1Blocker, a very mature ad blocking tool that just added JS-based blocking rules, and StopTheMadness is a popular tool for tweaking websites e.g. forcing videos up front, stopping auto play, and showing their controls. This allows macOS native PiP on most websites that don't usually support it.
I haven't looked, but is there something stopping other browsers (say firefox) from integrating with keychain on the mac side other than maintainability/pride/whatever?
I think it depends on how may tabs you have at once. If you only have a handful of tabs, then compact mode works and gives you a small amount of extra vertical room. If you have more tabs though, they quickly get squeezed too much to be useful. Then it is horizontal space that becomes a premium. I prefer having the tabs and the address bar on separate lines to give the tabs their space and to give the address bar and the other icons in that are enough room to be useful. The idea that the content should be dominant is fine but I’m also using the browser features to interact with that content and don’t want to sacrifice the browser functionality.
The styling of the tabs as buttons and the reversed highlighting of the current tab are just broken UI for no apparent benefit other than someone thought it looked cool. (It doesn’t really).
This can import your passwords from Safari 15 and then can sync with Kagi for iOS which is a bit of a help.
For me the biggest loss would be Apple Pay, and “Sign in with Apple” which is incredibly useful for signing up to services while maintaining some level of privacy.
And by requiring an Apple Developer Account and associated tooling, they've made them just hard enough to develop that the long tail won't bother porting.
Network-level blockers are very crude and tend to cause errors that are hard to debug and fix. I get it if you have no other option and they work well enough with a very conservative blocklist, but in my experience a dedicated extension will block more ads, block them better (no blank spots in pages), break legitimate content less often and when it does be far easier to temporarily bypass.
Sure but the point is a browser level adblockers can separate the tracker content from the legitimate content while a network level blocker can either block both or neither.
So many large sites have started serving ads through the hostnames that serve their applications. It feels like a losing battle to keep only blocking at the DNS level.
Unless you’re also automating a VPN connection to your home network when you leave it, which can be very helpful if you’re running something like pihole
I'm on Safari, with the occasional testing and account segregations with Chrome. The combination of AdGuard[1] (found via SetApp[2]) and NextDNS[3] works for me well on Safari.
I use the AdGuard extension too, with a Raspberry Pi running AdGuard Home which in turn uses NextDNS. I highly recommend every part of this setup, it's maintenance free, extremely reliable and I can't remember the last time an ad or tracker got through it.
The adblocker Wipr has recently added something beyond the Content Blocker API with Wipr Extra. I only found it because I had forgotten to switch to AdGuard on my office Mac, and Wipr Extra showed up in an update. Lots of restrictions and caveats though about what it can and can't do. Some details at
I am the founder behind Orion, bootstrapping the project. Started working on it three years ago with a small team just to see if it would be possible to build something like this from scratch and we just kept going. Orion is today a daily browser for a few dozen beta-testers and it warms my heart to see that we got that far considering the competition.
Few questions about Orion answered that I see pop put in the comments:
- Orion uses native Keychain integration for passwords and will use iCloud Sync to sync between devices. We have full import from Safari, including passwords [1]
- Orion uses a slightly modified WebKit which allows us to run Chrome/Firefox extension support layer on top of it (about 70% of all extensions currently work in Orion - including uBlock Origin). We are planning to complete the support in the upcoming months.
- Orion is currently trying to get to the feature parity of the reference browser (Safari).
- Orion features developer tools from Safari with a few extra ones like the Error indicator in the address bar [2] We just started with this, expect many useful additions in the future.
- Orion is designed as a zero-telemetry browser.
- Orion iOS also features a number of useful innovations like the Data saver mode [3] and multiline URL edit [4]
- The business model for Orion is to have a Pro version for those who want to support its development.
I was the founder of ManageWP [5] which got acquired by GoDaddy in 2016. Moved from Belgrade, Serbia to SF Bay Area as part of the acquisition. Spent a couple of years there as VP of Product and then decided I want to build Orion and Kagi (privacy-respecting alternative to Google search), because one ambitious project was not enough :) Main reason for this is the concern for the future of the internet and the web my children will grow into using.
Hi there! Orion looks great and so far ticks all boxes for me. One thing I am wondering and that I don‘t see answered anywhere yet: Does/will it support PWAs both on iOS and MacOS?
In the same way Safari does (so it basically doesn't :) We can go into various reasons why is that the case but fundamentally we agree with that approach.
What we are planning to do though is have "Web apps" support, similar to Flotato [1], which will allow the user to achieve the same (or better) effect.
Interesting! Would that also work on iOS or desktop only? I am asking because I would like to be able to have a seamless code-server experience on iPad.
This looks like a very interesting project! Do you have plans to support anything like Firefox Containers? They're a really fantastic feature for the privacy-conscious.
This is an exciting project - I’ll definitely follow it closely. Do you have any plans in particular to make it especially useful to developers? It would be amazing to have a lightweight browser that’s easy on the battery like safari but with excellent dev tools.
Noticing your name - are you a free diver? If so what are your favourite dive locations?
We plan to integrate Design tools as well as Responsive modes found in some niche browsers. Orion (and Safari) actually have the ability to offer best iPhone emulation for desktop developers since they use the same rendering engine.
I noticed that part, and I suppose what I was wondering more specifically was if “many useful additions” might mean powerful tools for developers or something less ambitious.
Congrats for the project! Love the simple UI and extensions support.
Don't you fear being held back by WebKit, which is notoriously slow to implement new web platform features? Can you give some insights on how you chose the engine?
To answer the question, we need to go a step back and answer how did we chose the platform first. The decision to go with macOS first was made in 2018 for the simple reason that we thought macOS has a bright future as a consumer OS. This was pre-M1 so we are glad to see macOS adoption grow!
Once we settled on macOS, WebKit was a natural choice as it is the web rendering engine supported by the OS manufacturer. This would enable us to have best performance and OS integration features. The drawback was lack of any browser app frameworks so we basically had to write the browser app from scratch.
I am not that worried about WebKit's slow(er) pace of web platform feature adoption (although I'd love to see something like AVIF support etc.) partly because I know that these decisions are carefully weighted for their impact (what is the right level of hardware/browser/web separation for example). In the future, if Orion becomes success, we hope to be able to have full time contributors to help accelerate its development.
I tried the Speedometer 2.0 on my M1 Air in both Safari and Orion yesterday and got ~200 in Safari and ~250 in Orion. I have to do more runs, but if it's accurate it's pretty insane I think.
Will those features transfer to iOS though? Last time I checked truly custom browsers are not allowed there and extensions could be easily interpreted as running downloaded third party code, which is also a common excuse for Apple to throw apps off the store.
Definitely not perfectly yet, but initial support is there for Chrome and Firefox extensions, though I also wonder how this will work with the app store policies.
Don't get too excited. Many extensions do not work. It's as if Kagi needs to work on the code to make particular extensions work. I'm sure neither Firefox nor Chromium need to do that.
I just got added to the Orion beta last night, and have been using Kagi for a while now. Both seem remarkably polished for beta products, but still have their own quirks and rough spots. In my experience I’ve mentioned a couple things that I’d like to have, and the team was super quick to get them acknowledged and implemented. It’s going to come down to how the team chooses to monetize these for me, but I’d be more than happy to subscribe if it means I’m giving less to Google.
Hm, not exactly. I’m an enthusiastic Orion user and love how well it works on macOS, but very much don’t appreciate that I now have something locking me into it.
I've (M1/16GB MBA) got my usual 40+ tabs open and Brave is only using 536MB of memory. It's rock solid. I use G-Suite/Workplace and everything has been buttery smooth since I turned off Brave's crypto/BAT notifications.
I agree that keychain is the only reason I still use Safari for some things (and perfect sync with iPhone), but I lean more on 1Password these days.
Haha yeah. M1 w/ 16 GB here as well. I just counted and I have 59 tabs open. According to Brave's task manager the GPU process alone is at 2.4 GB followed by two Gitlab tabs grouped to 894 MB (wow, killing those) and then all the others averaging maybe 90 MB. Looking at Activity Monitor I'd eyeball the sum of the processes to be maybe 4 GB.
I count Brave's emphasis on crypto as a pro and necessary for our hopefully one day ad-less future.
If you block ads without allowing the ability to donate a token you are effectively stealing from site owners and causing the rise of paywalls and other restrictions on the internet.
Putting aside legitimate qualms about Brave’s ad blocking business model, “skeezy” refers to Brave themselves showing me by default multiple home screen ads for various crypto wallet and NFT brokers. Opinions vary wildly on HN, but for me that entire scene is kissing cousins with MLM.
"If you block ads without allowing the ability to donate a token you are effectively stealing from site owners and causing the rise of paywalls and other restrictions on the internet."
I'd use this if you can remove all the Apple crap features:
- All the crap of AI / machine learning to prevent cross-site tracking that's useless to me in "Private Browsing" mode - just give me back control over cookies (manually and through third-party extensions), and keep Apple away from my data.
- Remove the crap "Web Advertising: Allow privacy-preserving measurement of ad effectiveness" code from webkit. Keep advertisers, and Apple's online advertising networks, away from my data.
So just as there are many Chrome clones that advertise they've removed all Google spying code from it, please offer a Webskit browser without Apple's crap baked into it. If possible also reverse the changes Apple made to Webkit that actually slightly cripples adblockers, like uBlock, from working effectively on it.
> changes Apple made to Webkit that actually slightly cripples adblockers, like uBlock, from working effectively on it
We already did that, uBlock Origin works on top of WebKit in Orion.
Also, Orion is zero-telemetry by default to address your other concern. Fire up a network proxy when using Orion and you will be welcomed with a wall of silence.
That's really good to hear! But how it works is what matters as even Chrome still technically supports uBlock Origin but Blink has been modified to ensure that ad blockers like it can't work efficiently on it anymore. According to Raymond Hill, Firefox is the browser that currently works best with uBlock Origin. Does Orion's implementation match the feature parity of how uBlock Origin works with Firefox, going even beyond content blocking? Does your modification of Webkit include all the API that uBlock Origin currently uses on Firefox?
As far as we know, Raymond Hill did not test uBlock Origin in Orion yet, and when he does I hope he will be able to share the details of support with us.
> All the crap of AI / machine learning to prevent cross-site tracking that's useless to me in "Private Browsing" mode
Private Browsing, on its own, can only limit the scope of cross-site tracking to a single Private Browsing session. It does not prevent cross-site tracking within that session. (For example, if you visit two web sites within a Private Browsing session which both use Facebook widgets, Facebook may be able to correlate your activity across those sites.)
True, and a good point. I scoff at Webkit ITP because Apple has tried to "balance" the needs of the advertising industry vs Safari users. I prefer a more aggressive solution - prevent the tracking cookies in the first place. Take the example you cited - if uBlock Origin removes the Facebook widgets, and blocks Facebook tracking on all websites I visit, I won't have any tracking cookies in the first place. That automatically prevents cross-site tracking within a particular session. It must be obvious this solution is much more effective and hence why I consider ITP inferior.
WebKit's ITP is works entirely on-device. And Orion supports uBlock (via the WebExtensions API) if you happen to trust that more than content blocking.
Webkit ITP is Apple's way of trying to "balance" the interest of advertising platforms (which it also has) vs the interests of Safari users. Thus, it still allows for some tracking. As a user that is hostile to tracking and profiling, I prefer the more aggressive solution of blocking the tracking cookies altogether in the first place, and preventing any tracking. Thus, uBlock Origin offers the ideal solution to me, as unlike ITP, it blocks all tracking cookies and even goes further by preventing the tracking codes from even executing (thus even preventing the trackers from using other methods that advertisers have started using to bypass ITP - https://resources.observepoint.com/blog/webkit-itp-analytics... ). Thus, I feel ITP is a pretty limited and inferior solution from that perspective.
(I also believe this feature was introduced to introduce another vector for data collection of browsing data of its users that don't use Safari on iCloud - while ITP does run on the machine, it gave Apple a good excuse to initially collect cookie data from all users to analyse it for ITP modeling - Apple does collect data "to improve its services". Honestly, I am just very cynical about Apple and other BigTech when it comes to my privacy and data.)
Good to know that WebExtensions API has been ported to Webkit by the Orion team. It needs to be seen how they've implemented it though - even Chrome supports WebExtensions but we all know how Blink has been modified to cripple uBlock Origin and other adblockers on it.
Actually I don't even bother using Safari at all because of crap like this. Should have been obvious that if i am looking for a privacy first alternative to Apple Safari, it is because I don't trust Apple.
True. I am currently stuck with a Mac due to some proprietary apps. However, by using an older macOS, not using iCloud and with an application firewall blocking Apple softwares from the net, my personal data is relatively safe from Apple for now.
How well does its autofill integrate with Keychain Services? I think that might be the only compelling reason to use Safari, that and maybe iCloud tabs.
I have been using Orion and my interest arose because it purportedly supports Firefox and Chrome extensions. It supports some, but not most. When I post about the extension I need most, xbrowsersync, in the Orion Discord forum I am ignored. It doesn't work - nor does any other extension which syncs bookmarks. Given this lack of support I can see little advantage over Safari TBH.
What benefits does this give me over Safari or Firefox? Not really an Adblock or extension user. The websites I frequent don’t have invasive ads and the one’s that do get put into reader view, even if it means losing part of the content or weird picture placement. If you have invasive ads I’m not coming back.
Both Safari and Firefox are rock solid browsers with excellent heritage. Just being put in the same basket as them for consideration is very flattering for us to begin with.
If you care about browser speed, then Orion is faster than Safari in almost all benchmarks (and Safari was already fastest browser on Mac to begin with).
I guess you're not the target consumer, so none. The main selling points are privacy ("like no other") and cross-platform extensions, which don't matter to you
How does Safari not have privacy features? Or Firefox? Apple has very publicly been trying to block tracking on its platforms and has the resources that are comparable to nation states. The also publicly fought the FBI and, if the blogs are true, severely hindered FaceBooks tracking.
Kagi is bootstrapped by a somewhat unknown founder presumably in Serbia or from Serbia. Serbia has not always been a friend of the West/US and the government can compel people to do things that are not privacy friendly. I mean no offense by this statement and I have spent time in Serbia. My ears do perk up when I hear Serbia/Balkans or Eastern Europe related to privacy.
I wonder what exactly has changed since the last time this was on Hacker News. There's a plethora of Webkit-derivatives to choose from, I don't see why I should choose the one that won't let me also install it on my other devices.
It wouldn't have changed from last time, but for some native browser chrome and platform integrations are highly appealing, particularly now that most browsers have gone all-in on brand-driven UI and try to pull you into your ecosystems.
> Not yet, but we plan for it to be when we are ready to receive the benefits of open-sourcing Orion. Creating something as big and ambitious as Orion (which includes forking WebKit, porting entire WebExtensions API and writing a browser app from scratch) is challenging enough for a small team like ours. We can not afford any other overhead - and properly maintaining an open source project takes time and resources. If you want to contribute, the best way to do that is to become a beta tester.
Not any more to my knowledge. But if Orion becomes a success there might be one! (founder here)
Current situation is - WebKit works great on Linux so that is not a problem. We've built WebKit on Windows too and while it works, it's not great. We are talking few developer-years of effort there (performance is main issue).
Anybody else remember the original Kagi.com? It was an early payment processor for independent software developers.
I sold my first shareware license on Kagi. Probably less than ten people in total bought my screensaver, but it inspired me to switch careers to software.
Huh, I lost a few hundred bucks out of the collapse, bankruptcy and dissolution of OG Kagi. Before then, that was what Airwindows used for a payment processor, for years.
Them going bust was the impetus for me moving to Patreon and fully open source. I've been talking about Kagi in the past tense for years. Now that's a name I've not heard in a long time…
I am not sure if there are many people like me, but I am using Keychain and it is the reason why I default to Safari and using any other browser it takes effort that I am doing, but I really wish Keychain could be integrated in other browsers too.
LE: It seems they already support this as stated in their FAQ/"How does Orion store my passwords?"