6 ms·

Use uBlock Origin, Multi Account Containers, Privacy Badger, Decentraleyes and CookieAutoDelete with Firefox. Make sure you aggressively clear cache, cookies, e

Use uBlock Origin, Multi Account Containers, Privacy Badger, Decentraleyes and CookieAutoDelete with Firefox. Make sure you aggressively clear cache, cookies, etc., periodically (with CookieAutoDelete). You’ll probably load the web servers more and also add more traffic on your network, but it will help protect your privacy since most websites don’t care about that. When websites are user hostile, you have to take protective measures yourself.

WC3w6pXxgGd 6y ago
Why not use Brave? It has all of this, with Fingerprint protection turned on by default.
- notriddle 6y ago
  Because cryptocurrency is a scam.
  - ldiracdelta 6y ago
    Then don't use the cryptocurrency part.. it isn't all-or-nothing.
- mastazi 6y ago
  Brave doesn't have the features offered by those extensions, it doesn't have anything equivalent to multi account containers, it doesn't have DNS emulation (unless you install Decentraleyes) and it doesn't auto delete cookies (you still need to install Cookie Autodelete). The built in ad blocker is not as advanced as uBlock Origin and that's why I installed the latter as an extension (I turned off the built in one). Anyway IMHO the biggest limitation currently is the lack of containers, because it needs to be built into the browser, there is no 3rd party extension that can give you that.
- cpeterso 6y ago
  Firefox’s Tracking Protection blocklist blocks many known fingerprinting scripts by default. Firefox also has an active fingerprinting protection mode that spoofs the unique values returned from some JavaScript APIs (such as locale, time zone, screen dimensions, WebGL), but this feature flash is currently buried in about:config because it can break websites. How to enable fingerprinting protection anyway: https://support.mozilla.org/kb/firefox-protection-against-fingerprinting https://support.mozilla.org/kb/firefox-protection-against-fi...
- bradly 6y ago
  With Brave you will still see personalized ads on some sites which I do not want see
buzzy_hacker 6y ago
Agree, but substituting multi-account containers with temporary containers https://addons.mozilla.org/en-US/firefox/addon/temporary-containers/ https://addons.mozilla.org/en-US/firefox/addon/temporary-con...
- infogulch 6y ago
  Oh nice! I've been wanting a container extension that just works on every site by default.
- mistahchris 6y ago
  This looks excellent. I've wanted something like this before but wasn't aware of this extension. Thanks for sharing :)
- commotionfever 6y ago
  temporary containers is really nice. but how can you replace MAC with it? I tried before couldn't assign some domains to "permanent" containers. eg. I'd like use temp containers all the time, except for some sites like YouTube where I'd like it to always open in a YouTube container
  - StochasticSand 6y ago
    I've combined it with Firefox's Multi-Account Containers. It works exactly as you've described, when used in tandem with temporary containers. https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/ https://addons.mozilla.org/en-US/firefox/addon/multi-account...
- surround 6y ago
  Cookie auto delete is fairly useless. It can’t delete supercookies. Whereas temporary containers takes care of everything.
driverdan 6y ago
You forgot NoScript. uBlock Origin with privacy lists negates the need for Privacy Badger. Decentraleyes is neat but I've found multiple sites it breaks.
- llacb47 6y ago
  Why NoScript? uBlock Origin in medium or hard mode can be used instead.
m463 6y ago
I use umatrix... as long as it lasts.
- vxNsr 6y ago
  umatrix is built into ublock origin now, just enable advanced mode in ublock.
  - m463 6y ago
    thank you, that is great news!
floatboth 6y ago
Temporary Containers > any kind of auto-delete hacks
floatingatoll 6y ago
Doing this will make it trivially easy to fingerprint and track you on the web, as the set of people who use non-defaults like this list is 0.000001% of the total possible user space for their area, and your IP address probably only changes rarely or never A better way to protect yourself is to use a browser with tracking protections on by default, and leave the settings alone. You may see a few more ads but you’ll be a lot less tracked as a result. If personal convenience is the priority, then of course Adblock and so on to your heart’s content, but if not being tracked is the priority, reset your browser settings to default and remove weird addons that your neighbors don’t use.
- alfalfasprout 6y ago
  If you live in the Bay Area chances are plenty of others do the same thing.
  - rmdashrfstar 6y ago
    And for the rest of the globe?
- danShumway 6y ago
  I don't see how using containers in Firefox or auto-deleting cookies would have any negative effect here. None of the cache deletion/isolation addons should inject any Javascript into the page or alter headers in any way, so they shouldn't be detectable to sites you visit. So in terms of unique behavior, all that site isolation means is that you're going to hit caches more often and be missing cookies. I mean, sure, a website can recognize that you don't have any unique cross-site cookies to send them and make some inferences based on that, but the alternative is... having a unique cross-site cookie. So it's not like you're doing any better in that scenario. I can see an argument against a few of these like DecentralEyes, since they change which resources you fetch at a more micro-level. But uBlock Origin and Multi Account Containers seem like strict privacy/security improvements to me. UBlock Origin especially -- if you care about privacy, you should have that installed, because outside of very specific scenarios your biggest threat model should be 3rd-party ad-networks, not serverside 1st-party timing attacks/fingerprinting. No one should be running Chrome or Firefox without Ublock Origin installed.
SamuelAdams 6y ago
Or enable private browsing all the time. You'll have to log into your accounts every time you open your browser, but that's not really a big deal with a decent password manager. [1]: https://support.mozilla.org/en-US/kb/how-clear-firefox-cache#w_automatically-clear-the-cache https://support.mozilla.org/en-US/kb/how-clear-firefox-cache...
- skeletonjelly 6y ago
  Can you be tracked within the private browsing mode though? For instance in Chrome private tabs I know if you log in to something then open a new tab, that tab retains the cookies from the private session until you close all private tabs. Is this the same with Firefox? I'm hesitant to install yet another extension but I'm wondering if this one mentioned elsewhere in this thread will fix it, if it is the case with firefox https://addons.mozilla.org/en-US/firefox/addon/temporary-containers/ https://addons.mozilla.org/en-US/firefox/addon/temporary-con...
  - legends2k 6y ago
    No, in Firefox I've seen each private window is a separate unrelated container.
    - legends2k 6y ago
      Looks like I was wrong. All private windows and tabs belong to the same temporary container sharing cookies. Temporary Containers remedy this. [1]: https://medium.com/@stoically/enhance-your-privacy-in-firefox-with-temporary-containers-33925cd6cd21 https://medium.com/@stoically/enhance-your-privacy-in-firefo...
adrr 6y ago
Unless you’re clearing cache, local storage, and HSTS, They can still track you. We haven’t got to the other things that can keep state that don’t reside in the browser. Not to mention fingerprinting the device itself, I’ve seen fingerprinting minute differences in CPU since they aren’t all identical.
floxy 6y ago
Any reason to not go all-in and just use Tor? That's what I've been doing lately, although I'm not a web engineer, so I may not be doing the optimal thing.
- tempestn 6y ago
  I've found Tor to be too slow for everyday use. Plus you'll regularly get hit with (sometimes near-impossible) recaptchas.
  - floxy 6y ago
    Oh yes, there are definite downsides. There are plenty of sites that won't show you anything. I've taken the tact that there is more on the net than I could possibly view in a million lifetimes and just move on. I could see some people taking exception here. And yes, I don't bother with google's captcha, since if that shows up, it'll most likely never work, even if you keep trying. Some of the others will let you pass after one successful test. I don't find tor to be too slow though.
zwkrt 6y ago
If you’re doing all that it seems like a lot of cognitive dissonance to keep using the internet. It is optional, you know!
- legends2k 6y ago
  Internet in a modern world isn't option, really, you know!

WC3w6pXxgGd 6y ago

Why not use Brave? It has all of this, with Fingerprint protection turned on by default.

notriddle 6y ago
Because cryptocurrency is a scam.
- ldiracdelta 6y ago
  Then don't use the cryptocurrency part.. it isn't all-or-nothing.
mastazi 6y ago
Brave doesn't have the features offered by those extensions, it doesn't have anything equivalent to multi account containers, it doesn't have DNS emulation (unless you install Decentraleyes) and it doesn't auto delete cookies (you still need to install Cookie Autodelete). The built in ad blocker is not as advanced as uBlock Origin and that's why I installed the latter as an extension (I turned off the built in one). Anyway IMHO the biggest limitation currently is the lack of containers, because it needs to be built into the browser, there is no 3rd party extension that can give you that.
cpeterso 6y ago
Firefox’s Tracking Protection blocklist blocks many known fingerprinting scripts by default. Firefox also has an active fingerprinting protection mode that spoofs the unique values returned from some JavaScript APIs (such as locale, time zone, screen dimensions, WebGL), but this feature flash is currently buried in about:config because it can break websites. How to enable fingerprinting protection anyway: https://support.mozilla.org/kb/firefox-protection-against-fingerprinting https://support.mozilla.org/kb/firefox-protection-against-fi...
bradly 6y ago
With Brave you will still see personalized ads on some sites which I do not want see

buzzy_hacker 6y ago

Agree, but substituting multi-account containers with temporary containers https://addons.mozilla.org/en-US/firefox/addon/temporary-containers/ https://addons.mozilla.org/en-US/firefox/addon/temporary-con...

infogulch 6y ago
Oh nice! I've been wanting a container extension that just works on every site by default.
mistahchris 6y ago
This looks excellent. I've wanted something like this before but wasn't aware of this extension. Thanks for sharing :)
commotionfever 6y ago
temporary containers is really nice. but how can you replace MAC with it? I tried before couldn't assign some domains to "permanent" containers. eg. I'd like use temp containers all the time, except for some sites like YouTube where I'd like it to always open in a YouTube container
- StochasticSand 6y ago
  I've combined it with Firefox's Multi-Account Containers. It works exactly as you've described, when used in tandem with temporary containers. https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/ https://addons.mozilla.org/en-US/firefox/addon/multi-account...
surround 6y ago
Cookie auto delete is fairly useless. It can’t delete supercookies. Whereas temporary containers takes care of everything.

driverdan 6y ago

You forgot NoScript. uBlock Origin with privacy lists negates the need for Privacy Badger. Decentraleyes is neat but I've found multiple sites it breaks.

llacb47 6y ago
Why NoScript? uBlock Origin in medium or hard mode can be used instead.

m463 6y ago

I use umatrix... as long as it lasts.

vxNsr 6y ago
umatrix is built into ublock origin now, just enable advanced mode in ublock.
- m463 6y ago
  thank you, that is great news!

floatboth 6y ago

Temporary Containers > any kind of auto-delete hacks

floatingatoll 6y ago

Doing this will make it trivially easy to fingerprint and track you on the web, as the set of people who use non-defaults like this list is 0.000001% of the total possible user space for their area, and your IP address probably only changes rarely or never A better way to protect yourself is to use a browser with tracking protections on by default, and leave the settings alone. You may see a few more ads but you’ll be a lot less tracked as a result. If personal convenience is the priority, then of course Adblock and so on to your heart’s content, but if not being tracked is the priority, reset your browser settings to default and remove weird addons that your neighbors don’t use.

alfalfasprout 6y ago
If you live in the Bay Area chances are plenty of others do the same thing.
- rmdashrfstar 6y ago
  And for the rest of the globe?
danShumway 6y ago
I don't see how using containers in Firefox or auto-deleting cookies would have any negative effect here. None of the cache deletion/isolation addons should inject any Javascript into the page or alter headers in any way, so they shouldn't be detectable to sites you visit. So in terms of unique behavior, all that site isolation means is that you're going to hit caches more often and be missing cookies. I mean, sure, a website can recognize that you don't have any unique cross-site cookies to send them and make some inferences based on that, but the alternative is... having a unique cross-site cookie. So it's not like you're doing any better in that scenario. I can see an argument against a few of these like DecentralEyes, since they change which resources you fetch at a more micro-level. But uBlock Origin and Multi Account Containers seem like strict privacy/security improvements to me. UBlock Origin especially -- if you care about privacy, you should have that installed, because outside of very specific scenarios your biggest threat model should be 3rd-party ad-networks, not serverside 1st-party timing attacks/fingerprinting. No one should be running Chrome or Firefox without Ublock Origin installed.

SamuelAdams 6y ago

Or enable private browsing all the time. You'll have to log into your accounts every time you open your browser, but that's not really a big deal with a decent password manager. [1]: https://support.mozilla.org/en-US/kb/how-clear-firefox-cache#w_automatically-clear-the-cache https://support.mozilla.org/en-US/kb/how-clear-firefox-cache...

skeletonjelly 6y ago
Can you be tracked within the private browsing mode though? For instance in Chrome private tabs I know if you log in to something then open a new tab, that tab retains the cookies from the private session until you close all private tabs. Is this the same with Firefox? I'm hesitant to install yet another extension but I'm wondering if this one mentioned elsewhere in this thread will fix it, if it is the case with firefox https://addons.mozilla.org/en-US/firefox/addon/temporary-containers/ https://addons.mozilla.org/en-US/firefox/addon/temporary-con...
- legends2k 6y ago
  No, in Firefox I've seen each private window is a separate unrelated container.
  - legends2k 6y ago
    Looks like I was wrong. All private windows and tabs belong to the same temporary container sharing cookies. Temporary Containers remedy this. [1]: https://medium.com/@stoically/enhance-your-privacy-in-firefox-with-temporary-containers-33925cd6cd21 https://medium.com/@stoically/enhance-your-privacy-in-firefo...

adrr 6y ago

Unless you’re clearing cache, local storage, and HSTS, They can still track you. We haven’t got to the other things that can keep state that don’t reside in the browser. Not to mention fingerprinting the device itself, I’ve seen fingerprinting minute differences in CPU since they aren’t all identical.

floxy 6y ago

Any reason to not go all-in and just use Tor? That's what I've been doing lately, although I'm not a web engineer, so I may not be doing the optimal thing.

tempestn 6y ago
I've found Tor to be too slow for everyday use. Plus you'll regularly get hit with (sometimes near-impossible) recaptchas.
- floxy 6y ago
  Oh yes, there are definite downsides. There are plenty of sites that won't show you anything. I've taken the tact that there is more on the net than I could possibly view in a million lifetimes and just move on. I could see some people taking exception here. And yes, I don't bother with google's captcha, since if that shows up, it'll most likely never work, even if you keep trying. Some of the others will let you pass after one successful test. I don't find tor to be too slow though.

zwkrt 6y ago

If you’re doing all that it seems like a lot of cognitive dissonance to keep using the internet. It is optional, you know!

legends2k 6y ago
Internet in a modern world isn't option, really, you know!