146 lines
6.8 KiB
HTML
146 lines
6.8 KiB
HTML
<!DOCTYPE html>
|
||
<html lang=”en-us”>
|
||
<head>
|
||
<link rel="stylesheet" href="../style2.css">
|
||
<meta charset="UTF-8">
|
||
<title>Spyware Watchdog</title>
|
||
</head>
|
||
|
||
<body>
|
||
<center>
|
||
<h1>Mozilla Firefox Spyware Mitigation Guide</h1>
|
||
<p>
|
||
<a href="/">Back to Home</a><br>
|
||
<a href="/articles/firefox.html">Back to Firefox</a>
|
||
</p>
|
||
<img src="../images/firefox_logo.png">
|
||
<p>
|
||
After configuring Mozilla Firefox according to this guide it's rating changes like so:
|
||
</p>
|
||
<h3>Spyware Rating: <font color="orange">High</font> => <font color="lime">Not Spyware</font></h3>
|
||
<p>
|
||
Before beginning this guide it is important that you try and cross-reference it with other guides,
|
||
to see which prespective on this topic is the best way to do it for you. At the bottom of the page are links
|
||
to <a href="#Other_Guides">other guides</a> and projects like this one. You should strongly consider this as <b><font color=orange>
|
||
you may find other guides more useful than this one.</font></b>
|
||
</p>
|
||
<p>
|
||
Mozilla Firefox has a huge amount of spyware features, but they all can be disabled by using predefined profile settings.
|
||
To do this you need to create new Firefox profile:
|
||
<ul>
|
||
<li> Run <code>firefox -no-remote -ProfileManager</code> </li>
|
||
<li> Create a new profile </li>
|
||
<li> Exit. </li>
|
||
</ul>
|
||
Then open your Firefox user profiles directory. It should be located at:
|
||
|
||
<table border background="../images/bg.jpg" style="width:800px">
|
||
<tr>
|
||
<th> OS</th>
|
||
<th> Path</th>
|
||
</tr>
|
||
<tr>
|
||
<td> Windows 7</td>
|
||
<td><code> %APPDATA%\Mozilla\Firefox\Profiles\XXXXXXXX.your_profile_name</code></td>
|
||
</tr>
|
||
<tr>
|
||
<td> Linux </td>
|
||
<td><code> ~/.mozilla/firefox/XXXXXXXX.your_profile_name</code></td>
|
||
</tr>
|
||
<tr>
|
||
<td> OS X</td>
|
||
<td><code> ~/Library/Application Support/Firefox/Profiles/XXXXXXXX.your_profile_name</code></td>
|
||
</tr>
|
||
<tr>
|
||
<td> Android</td>
|
||
<td><code> /data/data/org.mozilla.firefox/files/mozilla/XXXXXXXX.your_profile_name</code></td>
|
||
</tr>
|
||
<tr>
|
||
<td> Sailfish OS + Alien Dalvik</td>
|
||
<td><code> /opt/alien/data/data/org.mozilla.firefox/files/mozilla/XXXXXXXX.your_profile_name</code></td>
|
||
</tr>
|
||
<tr>
|
||
<td> Windows (portable)</td>
|
||
<td><code> [firefox directory]\Data\profile\</code></td>
|
||
</tr>
|
||
</table>
|
||
</p>
|
||
<p>
|
||
Delete everything from the new profile and get ghack's user.js<br>
|
||
<ul><li>cd /path/to/your/profile && rm -r * && wget https://raw.githubusercontent.com/ghacksuserjs/ghacks-user.js/master/user.js</li></ul>
|
||
You may want to edit the file to your needs, if so
|
||
<ul><li>yourtexteditor user.js</li></ul>
|
||
</p>
|
||
<p>
|
||
If you want to disable OCSP as well, you should also add this to your user.js. These settings are seperated
|
||
because while OCSP is a privacy breach it is also a security feature, and so whether to have it on or off should
|
||
be thought about before continuing. You can read about OCSP here: <a href="https://scotthelme.co.uk/revocation-is-broken/">
|
||
https://scotthelme.co.uk/revocation-is-broken/</a> <a href="http://web.archive.org/web/20180831224302/https://scotthelme.co.uk/revocation-is-broken/">
|
||
[web.archive.org]</a> . The problem is, that OCSP is a form of phoning home, and you might not want to make those requests.
|
||
</p>
|
||
<code>
|
||
user_pref("security.ssl.enable_ocsp_stapling", false);<br>
|
||
user_pref("security.OCSP.enabled", 0);<br>
|
||
user_pref("security.OCSP.require", false);<br>
|
||
</code>
|
||
<p>
|
||
With this installation method, if you change any of user.js settings through about:config or Firefox preferences dialogs,
|
||
they will be reset to the user.js defined values after you restart Firefox.
|
||
This makes sure they're always back to secure defaults when starting the browser.
|
||
At the end you need to delete several default plugins in Firefox directory at <code>\Mozilla Firefox\browser\features\</code> that can violate privacy:
|
||
</p>
|
||
<ul>
|
||
<li> firefox@getpocket.com.xpi - Pocket </li>
|
||
<li> followonsearch@mozilla.com.xpi - Follow On Search </li>
|
||
<li> activity-stream@mozilla.org.xpi - Activity Stream </li>
|
||
<li> screenshots@mozilla.org.xpi - Screenshots </li>
|
||
<li> onboarding@mozilla.org.xpi - Onboarding </li>
|
||
<li> formautofill@mozilla.org.xpi - Autofill </li>
|
||
<li> webcompat@mozilla.org.xpi - Web Compatibility Reporter </li>
|
||
</ul>
|
||
|
||
<p>
|
||
It is highly recommended to also check other user.js template settings from ongoing <i>"ghacks-user.js project"</i><sup><a href="#1">[1]</a></sup> for further hardening Firefox privacy, security and anti-fingerprinting.
|
||
</P>
|
||
<hr>
|
||
<a name="Other_Guides"></a>
|
||
<h2>Other Guides</h2>
|
||
<p>
|
||
These are other guides and projects to help protect your privacy using Firefox. It's important to look at
|
||
other prespectives instead of reading JUST this guide. So you should be comparing all of the
|
||
guides that you can find to hear everyone's ideas about how this should be done, before you
|
||
finish setting Firefox up. Librefox is less of a guide and more of a project and series of tools and settings
|
||
you can download to help you make Firefox private.
|
||
</p>
|
||
<a href="https://www.privacytools.io/#about_config">Firefox: Privacy Related "about:config" Tweaks</a>
|
||
<a href="http://web.archive.org/web/20181031171622/https://www.privacytools.io/">[web.archive.org]</a>
|
||
<a href="http://archive.fo/SEFXb">[archive.is]</a><br>
|
||
<a href="https://restoreprivacy.com/firefox-privacy/">Firefox Privacy – The Complete How-To Guide</a>
|
||
<a href="https://web.archive.org/web/20181015023738/https://restoreprivacy.com/firefox-privacy/">[web.archive.org]</a>
|
||
<a href="http://archive.is/20180414165038/https://restoreprivacy.com/firefox-privacy/">[archive.is]</a><br>
|
||
<a href=" https://librefox.org">Librefox: Firefox with privacy enhancements</a>
|
||
<a href="http://web.archive.org/web/20181224083906/https://github.com/intika/Librefox">[web.archive.org]</a>
|
||
<a href="http://archive.is/Nb6oz">[archive.is]</a><br>
|
||
<hr>
|
||
<h2>Sources</h2>
|
||
<p>
|
||
<p>
|
||
<a name="1">1.</a>
|
||
<a href="https://github.com/ghacksuserjs/ghacks-user.js/blob/master/user.js">ghacksuserjs/ghacks-user.js</a>
|
||
<a href="http://web.archive.org/web/20181015031306/https://github.com/ghacksuserjs/ghacks-user.js/blob/master/user.js">[web.archive.org]</a>
|
||
<a href="http://archive.is/GXIBO">[archive.is]</a>
|
||
<br>
|
||
|
||
</p>
|
||
<hr>
|
||
<p><b>
|
||
This guide was created on 10/8/2018<br>
|
||
This guide was last updated on 4/2/2020
|
||
</b></p>
|
||
<p>
|
||
If you want to edit this article, or contribute your own article(s), contact us on XMPP over in spyware@conference.nuegia.net, or visit us at the git repo on <a href="https://codeberg.org/TheShadow/SpywareWatchdog">Codeberg</a>. All contributions must be liscenced under the CC0 liscence to be accepted.
|
||
</p>
|
||
<a href="https://creativecommons.org/publicdomain/zero/1.0/legalcode"><img src="../images/cc0.png" alt="CC0 Liscence"></a>
|
||
</center>
|
||
</body></html>
|