diff --git a/articles/bleachbit.html b/articles/bleachbit.html new file mode 100644 index 0000000..deb8f7e --- /dev/null +++ b/articles/bleachbit.html @@ -0,0 +1,35 @@ + + + + + + + + + BadWolf - Spyware Watchdog + + + +
+
+ ← Catalog +
+
+ BleachBit Logo +

BleachBit

+

Bleachbit is Tool to Clean Your System and Free Disk Space

+

Spyware Level: Not Spyware

+

BleachBit makes no unsolicited requests at all.

+
+

Further Reading

+

BleachBit Home Page

+
+

This article was created on 5/1/2022

+
+

If you want to contribute to this website, you can always make a pull request.

+

All contributions must be licensed under the CC0 license to be accepted.

+ CC0 License +
+
+ + diff --git a/articles/brave.html b/articles/brave.html index 1efc8d6..15d4e68 100644 --- a/articles/brave.html +++ b/articles/brave.html @@ -53,13 +53,6 @@

On the first run, Brave fetches five extensions from brave-core-ext.s3.brave.com and tries to install them:

brave extensions

Not spyware related, but worth noting

-

Whitelisting spyware from Facebook and Twitter

-

On its website, Brave claims that "Brave fights malware and prevents tracking, keeping your information safe and secure. It’s our top priority."[6]. Yet despite this claim, Brave actually disables its tracking protections for Facebook and Twitter's scripts that allow them to track people across the web.[5] Brave has been actively downplaying the role that JavaScript plays when tracking someone.

-

-

"Loading a script from an edge-cache does not track a user without third-party cookies or equivalent browser-local storage, which Brave always blocks and always will block. In other words, sending requests and receiving responses without cookies or other means of identifying users does not necessarily create a tracking threat."[7]

-

-

This couldn't be more far from the truth. Just because a website isn't able to store cookies, doesn't mean it can't uniquely identify you. Using JavaScript from Facebook and Twitter would be more than enough to track you and blocking cookies alone isn't going to stop that. Just as a quick point of reference to what information JavaScript can scrape, you might want to visit this website.

-

They recently added an option here to block some of the scripts from Facebook, Twitter, and LinkedIn after receiving pushback as a result of the controversy. A quick note is that so long as you're using a chromium based browser, you should be able to manage JavaScript usage either way here.

Anti-privacy search engine by default

Google is the default search engine of Brave. For a browser that claims to be privacy oriented, this is a red flag. They at least make it easy for you to change the default search engine on the first run.

diff --git a/articles/brave_ru.html b/articles/brave_ru.html index de60922..92b0c3b 100644 --- a/articles/brave_ru.html +++ b/articles/brave_ru.html @@ -53,13 +53,6 @@

При первом запуске Brave скачивает пять расширений из brave-core-ext.s3.brave.com и пытается установить их:

brave extensions

Не связано со слежением, но стоит отметить

-

Twitter и Facebook занесены в белый список

-

На своём веб-сайте Brave утверждает: "Brave борется с вредоносными программами и предотвращает отслеживание, сохраняя вашу информацию в целости и сохранности. Это наш главный приоритет."[6]. Тем не менее, несмотря на это утверждение Brave фактически отключает защиту от отслеживания со стороны Facebook и Twitter[5]. Brave преуменьшает роль JavaScript при отслеживании кого-либо.

-

-

"Работа скрипта из кеша не отслеживает пользователя без сторонних файлов cookie или похожего локального хранилища, которые Brave всегда блокирует и всегда будет блокировать. Другими словами, отправка запросов и получение ответов без cookie или других средств определения пользователя не создаёт угрозу отслеживания."[7]

-

-

Это не может быть даже похоже на правду. Просто по тому, что сайт не может хранить файлы cookie, нельзя сказать, что он не может однозначно вас определить. Использование JavaScript со стороны Twitter и Facebook будет более чем достаточно, чтобы отследить вас, и блокирования только файлов cookie недостаточно, чтобы остановить слежку. В качестве быстрой демонстрации возможностей отслеживания JavaScript посетите этот веб-сайт.

-

Недавно здесь была добавлена возможность блокировки скриптов от Facebook, Twitter и Linkedin. Примечание: если вы используете браузер на основе Chromium, то у вас всегда есть возможность управлять JavaScript здесь.

Неконфиденциальный поисковик по умолчанию

Google - стандартная поисковая система в Brave. Это очень странно для браузера, позиционирующего себя приватным. По крайней мере, при первом запуске Brave даёт выбор поисковой системы по умолчанию.

diff --git a/articles/chrome.html b/articles/chrome.html index 522fce6..0f670bb 100644 --- a/articles/chrome.html +++ b/articles/chrome.html @@ -162,5 +162,4 @@ - diff --git a/articles/index.html b/articles/index.html index 680d573..12c0358 100644 --- a/articles/index.html +++ b/articles/index.html @@ -56,7 +56,7 @@ [Русский]
  • Ungoogled Chromium
  • Web Browser
    • -
  • Tor Browser
    • +
  • Tor Browser [Mitigation Guide]
    • @@ -117,6 +117,7 @@

    Misc Software

    - \ No newline at end of file + diff --git a/guides/tbb.html b/guides/tbb.html new file mode 100644 index 0000000..79dd059 --- /dev/null +++ b/guides/tbb.html @@ -0,0 +1,78 @@ + + + + + Tor Browser Spyware Mitigation Guide — Spyware Watchdog + + + +
    +
    + ← Home + Tor Browser → + Tor Browser Bundle Logo +
    +

    Tor Browser Mitigation Guide

    +

    Version tested: 11.0.3

    +
    +

    Note: Changing browser settings on TBB is not recommended by some, as they argue it is bad because it increases fingerprinting. Please also note that this is SpywareWatchdog, and not FingerprintWatchdog.

    +
    +

    After following this guide the rating changes thusly:

    +

    Spyware Rating: Low → Not Spyware

    +

    Besides using the torrc configuration file, or host files, the only way to completely remove the connections is to unpack two omni.ja files, and remove all the addresses, and then re-zip the omni.ja files.

    +
    +

    Find your omni.ja files:

    + + find . -name omni.ja + +

    Unpack them (do this for both of them separately):

    + + mkdir unpack +
    + mv omni.ja unpack +
    + cd unpack +
    + unzip omni.ja +     +

    Remove telementry:

    + + find ./Browser/ -type f -print0 | xargs -0 sed -i 's/https\:\/\/firefox\.settings\.services\.mozilla\.com\/v1\/buckets\/main\/collections\/nimbus-desktop-experiments\/records//g'; +
    + find ./Browser/ -type f -print0 | xargs -0 sed -i 's/https\:\/\/firefox\.settings\.services\.mozilla\.com\/v1\/buckets\/main-preview\/collections\/search-config\/records//g'; +
    + find ./Browser/ -type f -print0 | xargs -0 sed -i 's/https\:\/\/firefox\.settings\.services\.mozilla\.com\/v1\/buckets\/main\/collections\/search-config\/records//g'; +
    + find ./Browser/ -type f -print0 | xargs -0 sed -i 's/https\:\/\/firefox\.settings\.services\.mozilla\.com\/v1//g'; +
    + find ./Browser/ -type f -print0 | xargs -0 sed -i 's/onecrl\.content-signature\.mozilla\.org//g'; +
    + find ./Browser/ -type f -print0 | xargs -0 sed -i 's/remote-settings\.content-signature\.mozilla\.org//g'; +
    + find ./Browser/ -type f -print0 | xargs -0 sed -i 's/normandy\.content-signature\.mozilla\.org//g'; +     +

    Replace the omni.ja files:

    + + mv omni.ja back.omni.ja +
    + zip -0DXqr omni.ja * +
    + mv omni.ja .. +     +

    Disable auto updates:

    + + mkdir -p Browser/distribution/ + +

    Create file Browser/distribution/policies.json and put in:

    + {
    "policies": {
    "DisableAppUpdate": true
    }
    }     +
    +

    All done!

    +
    +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. +

    + + CC0 License +
    + + + diff --git a/images/bleachbit_logo.png b/images/bleachbit_logo.png new file mode 100644 index 0000000..f104581 Binary files /dev/null and b/images/bleachbit_logo.png differ diff --git a/images/tbbaboutnetworking1.png b/images/tbbaboutnetworking1.png new file mode 100644 index 0000000..edce502 Binary files /dev/null and b/images/tbbaboutnetworking1.png differ diff --git a/index.html b/index.html index 92ee53b..812671a 100644 --- a/index.html +++ b/index.html @@ -13,7 +13,7 @@
    Articles - Mirror list + Mirrors Misc