The Ultimate Guide to Firefox Hardening!
ฝัง
- เผยแพร่เมื่อ 11 ก.ค. 2024
- Let's dive into how to harden Firefox for the best privacy, security, and safety!
This video is sponsored by Privacy.com. Protect your financial identity online using virtual cards and get $5 off your first purchase: privacy.com/techlore
This is a v2 re-upload with some fixes! To view the fixes and why they were made, go here: github.com/techlore/channel-c...
One Important Detail! Refer to the Arkenfox Wiki for a few ways to improve uBlock Origin beyond its default settings, and some of the other referenced extensions. Specifically here: github.com/arkenfox/user.js/w...
All Resources:
PrivacyGuides DNS Resolvers - www.privacyguides.org/provide...
HTTPS Everywhere Deprecation SR - • HTTPS Everywhere Is Sa...
State Partitioning - developer.mozilla.org/en-US/d...
Site Isolation - hacks.mozilla.org/2021/05/int...
Arkenfox Recommended Extensions - github.com/arkenfox/user.js/w...
Arkenfox Wiki - github.com/arkenfox/user.js/wiki
Browser Fingerprinting Research: www.ndss-symposium.org/wp-con...
Very special thanks to:
Arkenfox - github.com/arkenfox
PrivacyGuides - www.privacyguides.org/
🔐 Our Website: techlore.tech
🕵 Go Incognito Course - to learn about privacy: techlore.tech/goincognito
🏫 Techlore Coaching - to get direct support: techlore.tech/coaching
💻 Techlore Forum - to connect with other advocates: discuss.techlore.tech
🦣 Mastodon - to stay updated: social.lol/@techlore
We cannot provide our content without our Patrons, huge thanks to:
BRIGHTSIDE, Clark, Ente, Larry, Afonso, Boori, Brad, Casper, Cookie, Floyd, JohnnyO, kevin, love your content, NotSure, Poaclu, x
🧡 Join them on Patreon: / techlore
💚 To see our production gear, privacy tools we use, and other affiliates: techlore.tech/affiliates
💖 All Techlore Support Methods: techlore.tech/support
00:00 Introduction
00:14 Our Sponsor!
00:40 What is Hardening & Why?
01:26 Easy stuff
03:15 Moderate stuff
05:23 Advanced stuff
06:18 Some bonus tips!
07:06 Our Sponsor!
07:36 Important final details!
#firefox #mozilla #hardening - วิทยาศาสตร์และเทคโนโลยี
![[FULL EP.14] เซียนหรั่ง สอน มาร์ชจุ จับปูนา ฮากระจาย | เฮ็ดอย่างเซียนหรั่ง | One Playground](http://i.ytimg.com/vi/M8mPjd_T2lo/mqdefault.jpg)
This video is sponsored by Privacy.com. Protect your financial identity online using virtual cards and get $5 off your first purchase: privacy.com/techlore
*1. This is a v2 re-upload with some fixes! To view the fixes and why they were made, go here: **github.com/techlore/channel-content/issues/30*
*2. One Important Detail! Refer to the Arkenfox Wiki for a few ways to improve uBlock Origin beyond its default settings, and some of the other referenced extensions. Specifically here: **github.com/arkenfox/user.js/wiki/4.1-Extensions#-recommended*
You left DRM enabled.
I don't get how Ublock Origin which uses a mantained blacklist can do better than Privacy Badger which recognizes tracking behavior?
@Gurpreet Singh It's Apple stuff.
@Gurpreet Singh Every browser claims to be so, but I don't trust 🍎.
@Gurpreet Singh I think Techlore gives good advice. I don't know so much. Firefox is easier to use than Tor. I keep my Google stuff activity such as TH-cam in Chrome, and use mostly Firefox private tabs for everything else. But that's my little imperfect way. If I was using an iPhone, I'd do the same with Apple services in Safari. I watch Techlore😃
Firefox does my hardening on a daily basis, it's only fair I should see to harden Firefox in return.
Do you use a separate profile? Or a separate, dedicated browser running on a RAM-drive on a compartmentalized system in a bunker?
Bro...just - don't
"Sir, I'm just the middle-man" ~Firefox
🤦🏼♂
@tranduy2668its one button, ragebaiter...
Awesome video, guys! I'm really looking forward for that LibreWolf vs. Hardened Firefox video. I'm really interested in LibreWolf as a project, primarily for wanting to get away from anything Chromium-based.
Been a privacy users for years love it and glad to see you guys promoting it. It's actually one of the great sponsor videos you don't see much! Also thanks for hardening tips. Most I had and have been a big fanboy to Adguard but no disrespect to UBO great tool
As a guy who has just entered the realms of the master race, this was extreamly helpfull! Im so happy there are people like you giving free tips and tricks 🤘. Keep it up! We need you!
Would love to see a video comparing LW vs Firefox! Btw great work guys you rock!
This was incredibly helpful.
please be aware that enabling settings related to "warning/detecting of dangerous files" will send a unique file identifier to google's scan cloud
you're talking to moronic teenagers, a guy wanting easy money on youtube with no security or it job or experience, and this comment section; read it.
it's a joke, youtube, firefox, the internet as a whole.
where is that?
Awesome video!
Nice vid mate
I'd like to see a video about uBlock Origins settings. I'm never sure if I have all the right lists enabled or if there's any 3rd party ones I should add, or how much of a benefit there'd be to learning to use Hard Mode over Medium.
time for an update video :) please and thank you! you have desktop version, mobile, and mobile beta(about:configs) Great video btw!!
Great video. Wen Harfened Firefox VS LibreWolf? Looking forward to that
Pleasu upload a user.js tutorial, keep the good work!!
WOW thanks bro!
Is privacy badger not needed then?
I have uBlock Origin, but privacy badger still detects 3 trackers from ads.
I got a question I did all the things but now when I upload images to a specific website it shows the pictures in weird different colors far from the original pictures not even showing the original picture anymore only colors is there a way to fix this?I disabled each plugin and thing but still coming with weird pictured colors not showing the picture at all anymore
What about WebRTC leaks? Or is that no longer needed to be set in the FireFox config?
Overrides guide would be golden. Too noob to understand the Arkefox wiki about it :D
Hey, I'm sure you get this question frequently, but what is your opinion on Waterfox. I've heard it's good and I used to use it but I want to have an experts opinion. Thanks!
What do you think about Firefox Profile Maker? I use it and it works well.
is it possible to solve the fingerprint issue WHILE still using Firefox?
(I'm really uneducated on this all so my question might be stupid but it's genuine)
Great info!
Glad it was helpful!
Is there a breve hardeing tutorial from you? or theres no need for that on brave?
nice! v2
Can this apply to Firefox on android or any of the firefoxish browsers from f-droid (Fennec, Mull, etc.)?
I'm using nightly Firefox , so i was going to keep the data collection. That a good idea you think?
on the note of extensions, what about extensions for developers and testers, are they safe? blazemeter, ranorex, selenium etc.
Yes, we need user.js tutorial
Agreed
Arkemfox's IMPORT URL SHORTENER didnt stay opted, each time I open Ublock its gone? and unticked I cant see any SAVE button - can you help?
Thanks so much❤
How come you turned local search suggestions off (browsing history, bookmarks, open tabs)? Is that necessary?
What about popup blocker (strict) the open source extenstion?
Will i need it????
ok but how do i replace clearurls with ublock origin's remove params and what lists do i have to add????
my gripe with firefox is not being able to turn off search suggestions without turning off saved passwords. Or am I doing it wrong?
i started the vid thinking i would fill a second infinity gauntlet with more add ons that i didnt know of, but i actually unistalled some :D btw what about user agent switcher? is that add on still recommended?
Glad to hear! And for UAS, very unlikely you need it. Check out the bottom of this section: github.com/arkenfox/user.js/wiki/4.1-Extensions#-dont-bother (Also worth checking the entire webpage & wiki, it's very useful)
@@techlore nice, thanks! :)
Good video.
Mate, do we no longer need add-ons like minerBlock?
I was hoping to hear a little about DoH. Thoughts?
Thanks a lot! Just one question: What do you think about the add-on Facebook Container"? Is it really needed? Does it work for other Facebook/Meta products like Whatsapp, Instagram, etc. or is there another add-on for that?
I think he mentioned a multi-account container in this video
Please make a video on uBlock Origin!
Since these settings i always get asked by google and youtube to accept cookies and add customisations. It reappears each time even if i accept. Any way to fix this?
Hey, great video! I had a question about DNS over HTTPS. I'm on macOS Ventura and it's not showing up in my Network Settings. Do you know why? Thanks!
same here on windows 11. i think it got removed from firefox or something?
Why is *noscript* never mentioned in these contexts?
Especially now that it has 'nuAbe' (my term) which is pretty much 90% of the old ABE functionality.
how to make arkenfox search at address bar? its kinda annoying to change address bar to search bar just for searching something
brave vs hardened firefox which is better?
what fingerprinting tools you suggest we use? i use eff's cover your tracks and firefox (desktop and android) has still unique fingerprint ... only brave managed to get randomized ... but i use amiunique both had unique fingerprint ... its confusing
Fingerprinting is just too easy to do, there are so many possible ways to track people.
I think the only solution would be a full on virtualization on the browser & how it renders content. Maybe Firefox is just a virtual box for Firefox OS in the future that way none of our system elements can effect the browser. But we would need quite a bit of processing power for that.
I have never seen Panopticlick NOT think a browser is unique, even on mobile. It's pretty much impossible to avoid being fingerprinted while also making the browser usable for your needs. If you want to avoid fingerprinting, you'll have to either kneecap it badly (eg disable JavaScript), and/or make it the basic default settings and not have _anything_ you personally want.
(Alternately, you could try to convince the browser developers to make the default browser configuration the way you want it, but they tend to be so obdurate and arrogant, you can't even convince them to make universally-beneficial changes or even to talk them out of making universally-harmful changes, that's why I quit using Chrome and am considering leaving Firefox. 😒)
Since the previous video was unlisted, I'll add it again: Librewolf might be a better alternative to Firefox as all of the Mozilla telemetry/phoning home is removed out of the box. Pretty much all the steps highlighted in this video are default in Libewolf.
It doesn't automatically update, but there is an extension specifically for Librewolf which notifies you on updates.
Once I've done said hardening, and changes, what's a good way to save my Firefox profile (all these settings + CSS etc) so that I can just copy paste it to any other computer, or quickly revert to it after a Windows reinstall?
How about brave hardening?
thanks man
Hi. After adding UBlock Origin, is NoScript needed? Thank you.
Hey! Due to time constraints, we're not able to answer each individual message but we have a wonderful community that would be able to help you! You can find the community on both Matrix and Discord!
there are information video suggesting firefox users are going down in numbers and eventually no one will test applications on browsers like firefox which are not chromium based. Do you think future is really that bleak?
Can this be done on mobile browser? A lot of these settings aren't available from what I can see
I don't think so
I know im a bit late to comment. But please review all the firefox forks. Or at least a top 10 or something.
Although i can wrap my head around the concept of using LESS extensions for my browser due to vlnerability reasons ; I didnt really understand from the video what config from Ublock does what ClearUrls extension does ?
I know that, with the Filter Lists in Ublock Origin, a message will pop-up if you are trying to access a "non-secure" website , similar to what Google does with a warnings about unsafe sites. But how does This filter List from Ublock works when trying to achieve a clean-url for sharing it with others ? (One of the things that Clearurls does).
Not bashing on Ublock, but i dont see how for this specific example, i would just not use ClearUrls anymore and just use Ublock. Thanks in advance.
uBO has a filter keyword for deleting query parameters from the url before making a connection:
(in the ublock origin github repo wiki section "Static filter syntax", paragraph "removeparam")
There is also a stable list in uBO filter list for removing tracking parameters in the url (AdGuard URL Tracking Protection) and there are also some more strict ones on the internet.
uBO maintainers answer a similar question here:
(in the uBlockOrigin subreddit and post string "rttrbp")
Jesus Christ I tried to post it like 5 times each time trying to hide the links differently and youtube just kept deleting it. Nuking every comment containing links is just so dumb, hopefully my instructions how to get to these links are more or less clear.
@@paweh.3681 I have had this experience. This is probably the correct way to send links in youtube comments:
'Replace "boxer" with a dot and "bingo" with slash : https:bingobingoenboxerwikipediaboxerorgbingowikibingoPrivacy"
@@sen7826 Were you baked when you came up with that?
@@abundantharmony it does work tho doesn't it? I'm a genius
hey dude what do you think about the trace extension? i think it has a lot of anti-tracking features that maybe aren't in firefox by default.. not sure tho
link
What about dark reader mode extension. Any alternative
You could try user-scripts, or if it's only for specific sites, user-stylesheets.
Repost?
At 5:46 - this does not open a file or folder on the latest Windows version.
Should I use No script then?
thank you thank you
recently I read news bout firefox and meta collaboration is that true?
Surveillance Report 75 covers this story: th-cam.com/video/BqNvMBgQncA/w-d-xo.html
Not a big deal
bro has a shirt from EFF and he rejects privacy badger💀
why does he reject privacy badger
Personally I have found websites that can detect I have visited before even on a new private session with RFP and canvasblocker was able to fix that
Make a tutorial for user.js plzzzzzzzzzzz
In 4:46, you added a disclaimer that uBlock replaces NoScript, but this is not true at all. I mean yeah, if you just want to block javascript completely, uBlock does have that feature, but NoScript allows you to fine-tune which 3rd parties can and can't run javascript exactly, which as far as I know isn't possible with uBlock. Not to mention the ability to control what js functionalities should be enabled. Just disabling javascript completely on a website usually completely breaks it, but with NoScript, we can only allow some trusted 3rd party javascript to prevent custom trackers, etc. It's a pretty advanced one, because it will still break most websites you visit, but if you don't mind this, it can improve privacy a lot.
Amazing Next Chrome hardening guide plzz💥💥
Just install Ungoogled Chromium and ublock origin
lmao privacy on chrome
funniest thing i've ever heard, edge and chrome have like NO privacy
@downtownswifty I know BUT chrome browser is even less private than firefox
Why do you keep ignoring librewolf firefox fork? It includes most of your tips by default.
It's mentioned in some of our other content....this guide is not about LW.
Is the ublock origin needed if I already use nextdns?
Yes, very different capabilities
@@techlorewhat is your favourite central Asian country?
@@techlorewhat is your favorite middle eastern dish?
@@techlore What makes Ublock Origin better than Privacy Badger (as you seem to think in this video)?
I'm edging right now.
why is firefox signing me out of everything whenever i close out of it, like youtube? wish i was able to fix that
if you dont like that it signs you out from websites, disable "Delete cookies and site data when Firefox is closed."
Hey is there anyway to use GrapheneOS with devices other than Pixel?
super
😍
Okay, this is an old video, so this may not be surprising, but I use LibreWolf and Presearch.
How about brave browser?
By default, it's superior, so there is no need for hardening, but if you want, you can tweak the setting
And what is with NoScript, it seems like a good way to stop malicious java scripts.
it block all javascripts, it kill almost all innocente sites. It's not a must
Why the reupload
Peep the description & pinned comment.
Better than Brave for me.
is there any way to sync firefox safely
Isn't syncing normally safe already? What decision have you made since making this comment? I'm debating on whether I should sync my stuff.
@@dav5306 I decided to only sync bookmarks. It all ete encrypts on your end before going over the wire. My thing is I don't trust anything completely. I really dont need anything else to sync from firefox. But it most likely is time to come back and see what has changed.
@@MrDormant Thanks for the quick reply, I think I'll take a similar approach.
How does uBlock Origin replace NoScript? Someone please explain lol
ublock origin blocks script so you don't need noscript. Questioned answered
when brave hardening?
can't harden a bloated chromium browser lol
uBlock Origin is good & CSS Exfil protection is something to look into.. You didnt mention that here..
Firefox over brave?
Hmnm I really like brave. Firefox is more privacy focused than brave?
Brave is more immediately privacy focused, Firefox takes a bit more time to set up for privacy but it's more effective.
@@mnzkrhpsds that's just for mobile yeah? Desktop brave has that built in tor...
Oh.. that's why the other one was unlisted lol
Why the reupload ?
Look at the description & pinned comment
why has this video been reuploaded?
Does _anybody_ read video descriptions or pinned-comments? 😒
Alright I'm all on board with hardening, but like. Wtf is up me having to sign into youtube everytime even when i set it as an exception.
5:39 saving this
2:20 What? Why did you suggest disabling search suggestions for open tabs and bookmarks?
This has 0 privacy benefits and greatly hurts user experience.
Don't disable search suggestions for open tabs or bookmarks, it is doesn't help woth privacy and harms your user experience
How about noscript!. I've been using noscript for the longest and as far as I know it still works.
so how to harden now lol
You missed the Trace addon
No
@@techlore :/
Gun
Mozilla is a member of the WEF. i think I will make a permanent switch to LibreWolf. i'm such a weirdo -- I like my freedom to be weird in whatever manner I so choose. The WEF doesn't accept freedom and thinks its dangerous.
If I wanted to be mothered, i'd move back in with my mommy. But, I ran away at age 16 and have been independent ever since.
I don't care about the WEF aspect, I'm more concerned that the Firefox devs are as obstinate and arrogant as the Chrome devs. They refuse to listen to feedback, they cannot be convinced to make universally-beneficial changes or talked out of making universally-harmful changes. They do whatever they want and make everybody swallow it. That's the reason I quit Chrome. The Firefox devs abandoned PWA which are the freaking future! 🤦
Didn't know that! Can the NWO die already?
you're based bro. Gigachad. I hate Klaus.
man you talk so fast, I had to pause every 5seconds :)
Just an FYI: If you go to the cog at the bottom right you can slow down the speed. - S
@@techlore If you would speak a little slower that is the real solution.
So i did this on my macbook and not im finding that my passwords saved on my osx system wont autofill in firefox anymore. any suggestions?
I thought I saw this video
firefox hardening guide: don't use Firefox because it has massive security holes in it ;)
Explain?
Help Ukraine! Any help, no matter how insignificant, is very important to survive