privacy/firefox/README.md

README

Make using the web more safe by disabling commonly used techniques and mechanism without sacrificing usability.

Why Firefox? It provides high configurability, is open source and thus better to be reviewed by external security advisories.

Mainly based on arkenfox with some custom overrides.

• README
  • Install
  • Custom overrides
  • Recommended extensions
    • Must have
      • uBlock settings
      • Canvas Blocker
      • LibRedirect
      • LocalCDN
    • Advanced, but highly recommended extensions / software to use
  • Recommended search engines
  • Additional hints

Install

To find your profile folder, click on the menu top right, on Help -> Troubleshooting Information. You can directly open your Profile Directory from there or see it, typically it's something like $HOME/.mozilla/firefox/... or in Windows %APPDATA%\Mozilla\Firefox\Profiles\...

• Install arkenfox (copy to your Firefox profile)
• Copy user-overrides.js also into your Firefox profile folder
  • Change any setting if needed, e.g. not clean history?
• Apply the user-overrides.js by running ./updater.sh or the .bat file on Windows in the Firefox profile folder
• Remove unnecessary search engines and apply your own or use DuckDuckGo/Startpage
• Install recommended extensions/plugins
• Import provides settings file for uBlock and Canvas Blocker
• Customize toolbar
  • add home button
  • remove separator spaces
• Disallow saving logins and use a password manager, e.g. KeePassXC
• Login to Firefox sync

Custom overrides

Look into user-overrides.js which custom overrides are enabled and maybe adapt to your needs. In general they're applied to ease browsing without sacrificing too much security or are just preferences, e.g. scroll speed.

Recommended extensions

Besides Firefox integrated anti-tracking mechanisms, it's still advised to install additional plugins to further enhance this.

In addition, some of those extensions will also greatly improve your user experience: fewer ads, faster page loads. Remember, you can also switch them off (disable), you don't need to uninstall.

Highly recommended to have all of them allowed in Incognito Mode as well (Maybe except for LocalCDN if desired)!

Must have

• uBlock Origin: blocks ads and unwanted trackers, also removes certain url parameters (https://addons.mozilla.org/de/firefox/addon/ublock-origin/)
• CanvasBlocker: disallows canvas fingerprinting which would be able to identify your unique browser, heavily used in some JavaScript (web) APIs (https://addons.mozilla.org/de/firefox/addon/canvasblocker/)
• Skip Redirect: skips not needed redirects of pages (https://addons.mozilla.org/de/firefox/addon/skip-redirect/)
• ClearURLs: removes tracking parameters from URLs, e.g., from Google analytics (https://addons.mozilla.org/de/firefox/addon/clearurls/)
• LibRedirect: automatically redirects to privacy-friendly frontends of certain applications, e.g., nitter for all Twitter links or piped for all Youtube links (believe me, you'll love the snappiness!) (https://addons.mozilla.org/de/firefox/addon/libredirect/)
• LocalCDN: some files like fonts are loaded from Google by some pages when they decide to do so, you can avoid it with this extension as it will have them properly embedded already, so you save the troubles of contacting Google servers (or other Content Deliver Networks) (https://addons.mozilla.org/en-US/firefox/addon/localcdn-fork-of-decentraleyes/)

Hint: Extensions impacting redirects or cookies might lead to malfunctioning of some websites. If you encounter this, it's recommended to disable them per page and NOT globally! First could shot can be setting an exception for a page inside uBlock.!

You can hide extension icons in the overflow menu if you like. Just right click the icon in the top right in the menu bar and "pin to overflow".

uBlock settings

• Import the ublock-config-1.txt in the "My Filter" menu for proper settings from the extension_settings/ folder within the extension.
• Import https://raw.githubusercontent.com/gwarser/filter-lists/master/lan-block.txt in "Filter lists" (Custom)

Canvas Blocker

Import the provided Canvas settings CanvasBlocker-settings.json file from the extension_settings/ folder within the extension.

LibRedirect

Import the provided libredirect settings libredirect-settings.json file from the extension_settings/ folder within the extension.

LocalCDN

Import the provided localcdn settings localcdn_backup.txt file from the extension_settings/ folder within the extension.

Advanced, but highly recommended extensions / software to use

Use a password manager and don't store or synchronize your passwords within internal browser functionality, e.g., KeePassXC or Bitwarden with a custom provider

Recommended search engines

If not possible in another way, you can add them via Add custom search engine. Just follow instructions after installing and opening the extension.

# Tied to "Germany" for search results, maybe you like to change this
# Then generate a different URL
https://duckduckgo.com/?q=%s&ks=l&kav=1&kn=1&kp=-2&kak=-1&kax=-1&kaq=-1&kao=-1&kau=-1&kaj=m&kam=google-maps&k1=-1&kae=c

# Tied to "Germany" for search results, maybe you like to change this
# Then generate a different URL
https://www.qwant.com/?q=%s&r=DE&sr=de&l=en_gb&h=1&s=0&a=1&b=1&vt=0&hc=0&smartNews=0&smartSocial=0&theme=0&i=1&donation=0&qoz=0&shb=0&shl=0

# Tied to "Germany" for search results, maybe you like to change this
# Then generate a different URL
https://duckduckgo.com/?q=%s&ks=l&kav=1&kn=1&kp=-2&kak=-1&kax=-1&kaq=-1&kao=-1&kau=-1&kaj=m&kam=google-maps&k1=-1&kae=c

Be sure to add shortcuts to be used in your navigation bar, e.g. @ddg refers to DuckDuckGo search engine and directly issues searches to DuckDuckGo from the navigation bar and does not use the default search engine, but your default!

Additional hints

Besides securing Firefox, you should consider not using the DNS servers of your Internet provider and instead install system-wide DNS alternatives or a local DNS server which directly queries root DNS servers. There's really no downside of this.