3 ms·

privacy.firstparty.isolate = true privacy.resistFingerprinting = true Throw in content blockers if you don't want the 3rd-party requests to happen at all i

privacy.firstparty.isolate = true privacy.resistFingerprinting = true Throw in content blockers if you don't want the 3rd-party requests to happen at all instead of just compartmentalizing the tracking. > when will you create a feature to dynamically update the user agent ? Extensions can do that. Not everything needs to be in the core browser, does it?

mickael-kerjean 9y ago
Wasn't aware about those options, thanks! I think those features should be build by browser vendor. Why? Because pretty much all the existing extensions claiming to "protect privacy" are doing a poor job at it. They all rely on an internal database of "bad guys" as if it's technically possible to even build such a database. For example, Cloudflare already control a large amount of website through their CDN. They are sending cookies regardless of the do not track headers. I haven't seen 1 of those extensions blocking website using Cloudflare. The do not track header is also a funny joke that even the W3C doesn't respect (https://pbs.twimg.com/media/DWtqPzFUQAExO2h.jpg https://pbs.twimg.com/media/DWtqPzFUQAExO2h.jpg)
- the8472 9y ago
  > They all rely on an internal database of "bad guys" Not all do. uMatrix comes with a whitelist-based approach, so all 3rd party requests (modulo images and CSS if you so choose) are blocked and need to be whitelisted to unbreak sites.
  - mickael-kerjean 9y ago
    I had quite a bit of those popular "privacy extensions" in the test bench: DuckDuckGo Privacy Essentials, Ghostery, Privacy Badger, Stealth mode and none of them were blocking things as I'd have expected. Thank you for proposing uMatrix it just pass the cookie test none of the above succeed, I might have found my new internet condom.
    - x0x 9y ago
      You can also try "Inox Browser"[1] based on Chromium but with security/privacy patches. With extensions like "uBlock0 (Origin)"[2], "uMatrix"[3]. [1] https://github.com/gcarq/inox-patchset https://github.com/gcarq/inox-patchset [2] https://github.com/gorhill/uBlock https://github.com/gorhill/uBlock [3] https://github.com/gorhill/uMatrix https://github.com/gorhill/uMatrix Optionally, unrelated to security you can try "Dark Reader" extension, which makes all sites darker ^_^ Especially useful with darker themes.
    - deleted 9y ago
      [deleted]
threecheese 9y ago
`privacy.resistFingerprinting = true` breaks just about every site that relies on timezone (gmail etc); I am patiently hoping for a whitelist. Unless you actually reside in UTC...

mickael-kerjean 9y ago

Wasn't aware about those options, thanks! I think those features should be build by browser vendor. Why? Because pretty much all the existing extensions claiming to "protect privacy" are doing a poor job at it. They all rely on an internal database of "bad guys" as if it's technically possible to even build such a database. For example, Cloudflare already control a large amount of website through their CDN. They are sending cookies regardless of the do not track headers. I haven't seen 1 of those extensions blocking website using Cloudflare. The do not track header is also a funny joke that even the W3C doesn't respect (https://pbs.twimg.com/media/DWtqPzFUQAExO2h.jpg https://pbs.twimg.com/media/DWtqPzFUQAExO2h.jpg)

the8472 9y ago
> They all rely on an internal database of "bad guys" Not all do. uMatrix comes with a whitelist-based approach, so all 3rd party requests (modulo images and CSS if you so choose) are blocked and need to be whitelisted to unbreak sites.
- mickael-kerjean 9y ago
  I had quite a bit of those popular "privacy extensions" in the test bench: DuckDuckGo Privacy Essentials, Ghostery, Privacy Badger, Stealth mode and none of them were blocking things as I'd have expected. Thank you for proposing uMatrix it just pass the cookie test none of the above succeed, I might have found my new internet condom.
  - x0x 9y ago
    You can also try "Inox Browser"[1] based on Chromium but with security/privacy patches. With extensions like "uBlock0 (Origin)"[2], "uMatrix"[3]. [1] https://github.com/gcarq/inox-patchset https://github.com/gcarq/inox-patchset [2] https://github.com/gorhill/uBlock https://github.com/gorhill/uBlock [3] https://github.com/gorhill/uMatrix https://github.com/gorhill/uMatrix Optionally, unrelated to security you can try "Dark Reader" extension, which makes all sites darker ^_^ Especially useful with darker themes.
  - deleted 9y ago
    [deleted]

threecheese 9y ago

`privacy.resistFingerprinting = true` breaks just about every site that relies on timezone (gmail etc); I am patiently hoping for a whitelist. Unless you actually reside in UTC...