The Complete Browser Security & Privacy Setup

The Complete Browser Security & Privacy Setup

Over here I’m going to give you the direct instructions to setup the ideal browser, being modified Firefox. Now when I say ‘ideal’, this is in reference to Hack Forum members for a reason. This tutorial can be mixed and match with a lot of other different settings, so if your a user who doesn’t need to take all that extreme precaution, you can choose what to adjust.

Every individual human has a unique fingerprint, if you’d like to track someone down you start with this. The same goes for the internet, except virtually. If you’d like to track someone down you’ll need to combine information, and one of that vital piece of information is a browser fingerprint. Browser fingerprinting is a combination of details pulled from plugins, operating system, and other entities to uniquely identify and track with accuracy.

In certain situations, it becomes ironic as the user can use all means measurable to hide his identity via VPN, CookieHiders, InformationSpoofers, and all other addons/plugins.. Yet this would create an even more unique of a browser fingerprint. The argument here is there will always be a ‘browser fingerprint’, but it’s up to the end user to modify and adjust it to their needs and capabilities.

[Image: Ps54v5f.png]

We'll be using Firefox for this, so open it and type about:config

Disable Telemetry :-

Code 
datareporting.healthreport.uploadEnabled

Then set to false : This will not allow firefox to send browser's performance and stability reports back to them.

[Image: Ps54v5f.png]

Disable Copy & Paste Log :-

Code 
dom.event.clipboardevents.enabled

Then set to false : This will not allow websites owners to read/modify/view this information, along with disable any scripts which prohibit of pasting in certain online forms (ex. verifying email). You will also be able to bypass anti-copy features on specific websites.

[Image: Ps54v5f.png]

Disable Web Storage :-

Code 
dom.storage.enabled

Then set to false : This will prohibit web-application software methods and protocols used for storing data in a web browser. Please note this can affect function or view of certain websites.

[Image: Ps54v5f.png]

Disable Google Safe Browsing :-

Code 
browser.safebrowsing.phishing.enabled

Code 
browser.safebrowsing.malware.enabled

Then set to false : Google Safe Browsing is a tool made to prevent phishing websites, but by enabling leaving this on you are accepting to give Google your browsing history. Phishing websites are identifiable by experienced users, however you can have the followed named extensions for prevention.

[Image: Ps54v5f.png]

Change Homepage & Search Engine :-

Code 
browser.startup.homepage

Then set to https://www.startpage.com/ : This will use a safe and recommend search engine when you first open Firefox (homepage), more available here

or

Visit : https://www.startpage.com & click “Add to Firefox”
Download > Click Add > Will ask to set as default Search Engine > Yes

[Image: Ps54v5f.png]

Disable Geolocation :-

Code 
geo.enabled

Then set to false : This will automatically select preference to not share your location.

[Image: Ps54v5f.png]

Disable Web Real-Time Communication :-

Code 
media.peerconnection.enabled

Then set to false : This will prevent websites being able to directly detect your computer’s host IP when using features such as voice calling, video chat, or P2P connections directly in your browser. VPN users automatically assume that this is covered, however not all VPN Providers provide blocking of WebRCT leaks.

[Image: Ps54v5f.png]

Disable DNS Prefetching :-

Code 
network.dns.disablePrefetch

Then set to true : This will prevent DNS resolvers from obtaining any data from prefetching leaks. To read more indepth about this click here

[Image: Ps54v5f.png]

Disable Hyperlink Information :-

Code 
network.http.sendRefererHeader

Then set to 0 : This will prevent clicked hyperlinks from providing information about the page you clicked the link from, data of this sort can track you from one website to another.

&

Code 
network.http.sendSecureXSiteReferrer

Then set to false : Same as above.

[Image: Ps54v5f.png]

Disable Prefetching :-

Code 
network.prefetch-next

Then set to false : This prevent algorithms assuming and predicting which resources are likely to be accessed by the browser user to speed up results, however has privacy implications. More information can be found here

[Image: Ps54v5f.png]

Enable Tracking Protection :-

Code 
privacy.trackingprotection.enabled

Then set to true : This will enable a shield, helps prevent cross-site tracking and as an extra benefit load pages 44%, you can see why in this following link...

[Image: Ps54v5f.png]

Extensions / Add-Ons

*uBlock Origin - A form of adblocker, with tweaked features to go the extra-mile in terms of anti-tracking.
*Privacy Badger - Privacy Badger blocks spying ads and invisible trackers.
*NoScript - Perfect tool to prevent malicious scripts in Javascript, Java and Flash.
*uMatrix - In the mix of uBlock + NoScript, for advance users who wish to work with source-code.
*Chameleon - Spoof your browser profile.
*CookieAutoDelete - To manage and delete cookies accordingly.