desktop_user.js/README.md

97 lines
3.7 KiB
Markdown
Raw Normal View History

2020-10-20 21:15:18 +00:00
## user.js | Firefox, Firefox ESR and Firefox Nightly.
2020-11-19 10:18:38 +00:00
A `user.js` file for configuring and hardening desktop Firefox privacy.
2020-10-20 21:11:06 +00:00
2020-12-19 16:30:05 +00:00
Concretely, this is a fork from the [arkenfox](https://github.com/arkenfox/user.js) project.
2020-10-20 23:22:52 +00:00
2020-10-20 21:11:06 +00:00
## Goals
2020-12-21 10:08:38 +00:00
* enhance privacy and security
2020-10-20 21:11:06 +00:00
* improve performance
* better fingerprint possible
* reduce automatic connections to the minimum posible
## Considerations
This user.js is a fork from the arkenfox project with a substantial divergence. It tries to avoid all the automatic connections even though security could be reduced slightly.
2020-10-20 21:14:05 +00:00
For instance, OSCP is a privacy breach. Nevertheless, it is also a security feature. This user.js disables them as well as safebrowsing, automatic addons connections and so on. You will have to check manually addons updates in the related preferences section.
2020-10-20 21:11:06 +00:00
2020-10-25 12:55:06 +00:00
However, one connection could not be blocked anymore:
2020-10-20 21:12:41 +00:00
* firefox.settings.services.mozilla.com
2020-10-20 21:14:05 +00:00
2020-12-21 10:08:38 +00:00
https://bugzilla.mozilla.org/show_bug.cgi?id=1598562#c13
2021-01-31 19:46:36 +00:00
[How to stop Firefox from making automatic connections](https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections)
(Section "Automatic updates and Security/Login breach information")
2020-10-25 12:55:06 +00:00
So you will have to include it to the host list of your OS.
2020-10-20 21:11:06 +00:00
2021-08-07 13:44:58 +00:00
Nevertheless, consider installing Abrowser from Trisquel, Icecat from Parabola and/or Iceweasel for Parabola. They lack that connection:
2020-11-19 10:18:38 +00:00
[Abrowser](https://archive.trisquel.info/trisquel/pool/main/f/firefox/?C=S;O=D)
2020-11-19 10:16:42 +00:00
2021-03-16 12:34:42 +00:00
[Icecat for Parabola](https://repomirror.parabola.nu/sources/parabola/)
[Iceweasel](https://repomirror.parabola.nu/sources/parabola/)
2020-12-19 16:30:26 +00:00
2020-12-19 16:29:49 +00:00
2021-02-06 18:39:43 +00:00
If you are still interested in using vanilla Firefox take into account it makes a connection to aus5.mozilla.org in order to autoupdate itself so you'll also have to add it to your host list.
Alternatively, you could copy the folder `distribution` with the `policies.json` file into your Firefox installation folder. More information about this:
2021-01-29 19:33:55 +00:00
[Customizing firefox using policies.json](https://support.mozilla.org/en-US/kb/customizing-firefox-using-policiesjson)
[DisableAppUpdate](https://github.com/mozilla/policy-templates/blob/master/README.md#disableappupdate)
2021-07-28 18:47:13 +00:00
Anyway, consider installing [Librewolf](https://librewolf-community.gitlab.io) instead of these. It's almost mitigated.
2020-10-25 13:02:37 +00:00
## Updating addons
Write about:addons
2020-10-25 13:03:15 +00:00
2020-10-25 13:02:37 +00:00
Choose Extensions
2020-10-25 13:03:15 +00:00
2020-10-25 13:08:05 +00:00
Click the icon above on the right (Tools for all add-ons) and Check for updates.
2020-10-25 13:02:37 +00:00
2021-01-31 19:46:36 +00:00
You may also install them manually downloading the respective xpi files.
2020-10-25 13:02:37 +00:00
2020-10-20 21:19:23 +00:00
## Adding new search engines
2020-10-20 23:28:12 +00:00
Installing new search engines from mycroftproject.com web is not working. Besides, they have embedded Google analytic trackers recently.
2020-10-20 21:19:23 +00:00
Follow this guide instead:
2020-10-26 18:50:59 +00:00
[Add a search engine from the address bar](https://support.mozilla.org/en-US/kb/add-or-remove-search-engine-firefox#w_add-a-search-engine-from-the-address-bar)
2020-10-20 21:19:23 +00:00
2021-08-07 13:44:58 +00:00
## Known problems
Some breakage?
Try changing "network.http.referer.XOriginPolicy" from 2 to 1
Performance loss?
Change these strings from false to true:
javascript.options.ion
javascript.options.baselinejit
javascript.options.native_regexp
2020-10-20 21:11:06 +00:00
## Thanks:
I really thank the following authors:
2020-11-19 10:18:38 +00:00
* [Arkenfox](https://github.com/arkenfox/user.js) - The majority of this user.js and updates.
2021-05-27 08:00:48 +00:00
* [LibreWolf](https://gitlab.com/librewolf-community) - Some strings.
2020-12-25 18:21:56 +00:00
* [Quindecim](https://git.nixnet.xyz/quindecim/mobile_user.js) - Some unique strings.
2021-07-28 18:47:13 +00:00
* [Tor Project](https://www.torproject.org) - Some Tor Browser strings.
2020-12-25 18:31:02 +00:00
* [Spyware Watchdog](https://web.archive.org/web/20200402031335/https://spyware.neocities.org/guides/firefox.html) - Mozilla Firefox Spyware Mitigation Guide (Archive.org)
## License
GNU General Public License v3.0.
2021-02-04 10:17:59 +00:00
See `LICENSE` for more details.
## Other mirrors
https://gitlab.com/Jorgu81/user.js/tree/master/Firefox%20Desktop