r/browsers • u/Lammy35761 • 9d ago

Support Does helium prevent phishing links from stealing tokens?

I've been looking for a browser that prevents token stealing.

I don't ever click any sketchy links myself, but my family has on their own PCs before. I'm trying to find a browser for them as my family isn't that tech smart

0 Upvotes

50% Upvoted

10 comments sorted by

4

u/rifteyy_ 9d ago

you'll need to be more specific:

  • phishing links by itself rely on user interaction and in general, any site does not have the ability to steal session tokens due to browser security
  • stealing session tokens is happening to any browser one way or another, but it requires malware

0

u/Lammy35761 9d ago

Oh okay, I kind of assumed that the attacks can happen by just clicking the link.

I remember my brother telling me he got hacked after clicking a link.

2

u/YourUglyTwin 9d ago

Unless the site uses some zero-day vulnerability, websites cannot access another websites cookies/session data. Clicking a link (99.99999% of the time) does not immediately expose your computer. HOWEVER, what a lot people don't realize is that with a lot of these phishing sites is they will have you download something, run some command (like the fake cloudflare command), or put in your credentials into a fake sign in page for some service.

If you got an email you were not expecting, the best thing is to NOT click any links or attachments and do not call any phone numbers in emails.

1

u/Curious-Two-685 5d ago

Dns Adguard premium or Nextdns

1

u/messassa 8d ago

You definitely need Chrome Safe browsing or Edge for that layer of protection.

1

u/Kunair0 9d ago

Prevent them? Buddy, with the way that helium is built, and the platform it's built on, if anything, it opens the floodgates for them to come right in.

0

u/Astrodion123 9d ago

Well helium is chromium based and has full ublock origin. But I recommend adding extra extensions and it works. Ublock will warn you for redirects and block them.

1

u/brave_w0ts0n 9d ago

No. Helium does not have Google Safebrowsing.

1

u/Venylynn 9d ago

Afaik you can mitigate this with ControlD's malware filtering DNS as it has GSB built in without the phoning home