4.1 Extensions
github.com
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening - arkenfox/user.js

I'm sure a lot of us are already using Firefox with uBlock Origin, and I'm also sure that most of us already know about Arkenfox.

Despite this, one thing that I'm still noticing on the internet are people recommending extensions that, as per the Arkenfox wiki, are frankly just not needed anymore.

So people, please stop using:

  • Cookie extensions like Cookie Auto Delete
  • URL cleaning extensions like ClearURLs
  • Anti-fingerprinting extensions
  • Redundant privacy extensions like Ghostery or Privacy Badger
  • NoScript

And also please note that Firefox Multi-Account Containers is probably overkill for most threat models, and that Firefox's builtin Total Cookie Protection is probably just fine.

  • dampfnudel@lemmy.zip
    ·
    1 year ago

    Yes but...

    • Most people want a quick-fix.... "just install these extensions and all your web privacy issues will be handled automatically, in the background and you don't ever have to do anything at all." The "no user effort required" approach isn't realistic and arkenfox is not a quick-fix. It's a lot of tough love imo.
    • To use arkenfox and also not get frustrated that the entire internet is broken you will need to create a good user-overrides.js file. Creating a good one takes time. So take it and create a good one.
    • RFP breaks a lot of things. If you choose to disable RFP, the arkenfox wiki suggests you use the anti-fingerprinting extension, CanvasBlocker.
    • If you use arkenfox's user.js you'll probably want to create multiple profiles with different levels of arkenfox strength, which can be determined by your user-overrides.js file.

    I mostly use arkenfox... but I also have a TCP + uBO only profile for when I need it.

  • Mikelius@lemmy.ml
    ·
    1 year ago

    I personally prefer NoScript not for just the privacy stuff, but for the security of knowing that an accidental click to a malicious site using some zeroday JavaScript exploit won't kick in like it would, had it not been default blocked.

    My NoScript profile is also fairly populated with things I've trusted over the years, so it's really only new websites that require JavaScript that I have to worry about.

    Maybe just me being over cautious, but just keeps me at ease, personally.

  • sub_ubi@lemmy.ml
    ·
    1 year ago

    Is it possible to limit permissions for an extension to just a few domains? Most of them I'm using just for specific sites