djedi/cypherpunk-cheats
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
cypherpunk-cheats/browser-hardening.cheat
rpriven 93ed13d6ee
Add nak (Nostr) + opsec secret-inspection; stage 20 privacy/security cheats 
- nak.cheat: fiatjaf's Nostr army knife (placeholder keys + relay picker)
- opsec.cheat: 'inspect secrets without exposing them' section
- Stage 20 previously-untracked cheats (gpg, tor, veracrypt, email-privacy, etc.)
- .gitleaksignore: allowlist the canonical jwt.io example token (verified false positive)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-28 13:36:00 -06:00

396 lines
13 KiB
Text
Raw Blame History

% browser, firefox, chrome, privacy, hardening, fingerprinting
# ============================================================================
# BROWSER SELECTION & INSTALLATION
# ============================================================================
# Recommended privacy browsers (in order)
# 1. LibreWolf (Firefox fork, privacy-hardened by default)
# 2. Mullvad Browser (Tor Browser without Tor network)
# 3. Firefox (with manual hardening)
# 4. Brave (Chromium-based alternative)
# Install LibreWolf (Debian/Ubuntu)
sudo apt install extrepo
sudo extrepo enable librewolf
sudo apt update && sudo apt install librewolf
# Install Firefox from Mozilla (not Snap)
sudo add-apt-repository ppa:mozillateam/ppa
sudo apt update && sudo apt install firefox
# Install Brave
sudo curl -fsSLo /usr/share/keyrings/brave-browser-archive-keyring.gpg https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg] https://brave-browser-apt-release.s3.brave.com/ stable main" | sudo tee /etc/apt/sources.list.d/brave-browser-release.list
sudo apt update && sudo apt install brave-browser
# Install Mullvad Browser
wget --content-disposition https://mullvad.net/en/download/browser/linux-x86_64/latest
# ============================================================================
# FIREFOX HARDENING (about:config)
# ============================================================================
# Access Firefox config
# Type in address bar: about:config
# Privacy settings (search and set these)
privacy.resistFingerprinting = true
privacy.trackingprotection.enabled = true
privacy.trackingprotection.socialtracking.enabled = true
privacy.firstparty.isolate = true
privacy.donottrackheader.enabled = true
# DNS over HTTPS (DoH)
network.trr.mode = 2
network.trr.uri = https://mozilla.cloudflare-dns.com/dns-query
# WebRTC IP leak prevention
media.peerconnection.enabled = false
media.peerconnection.ice.default_address_only = true
# Disable telemetry
toolkit.telemetry.enabled = false
toolkit.telemetry.unified = false
datareporting.healthreport.uploadEnabled = false
datareporting.policy.dataSubmissionEnabled = false
# Disable Pocket
extensions.pocket.enabled = false
# Disable prefetching
network.dns.disablePrefetch = true
network.prefetch-next = false
# HTTPS-only mode
dom.security.https_only_mode = true
dom.security.https_only_mode_ever_enabled = true
# Disable geolocation
geo.enabled = false
# Disable WebGL (fingerprinting vector)
webgl.disabled = true
# Disable canvas fingerprinting
privacy.resistFingerprinting.block_mozAddonManager = true
# ============================================================================
# FIREFOX EXTENSIONS (ESSENTIAL)
# ============================================================================
# uBlock Origin (ad/tracker blocking)
# Install: https://addons.mozilla.org/firefox/addon/ublock-origin/
# Privacy Badger (EFF tracker blocker)
# Install: https://addons.mozilla.org/firefox/addon/privacy-badger17/
# HTTPS Everywhere (force HTTPS)
# Install: https://addons.mozilla.org/firefox/addon/https-everywhere/
# Decentraleyes (local CDN emulation)
# Install: https://addons.mozilla.org/firefox/addon/decentraleyes/
# NoScript (JavaScript control)
# Install: https://addons.mozilla.org/firefox/addon/noscript/
# ClearURLs (remove tracking parameters)
# Install: https://addons.mozilla.org/firefox/addon/clearurls/
# Cookie AutoDelete (auto-delete cookies)
# Install: https://addons.mozilla.org/firefox/addon/cookie-autodelete/
# Temporary Containers (isolate sites)
# Install: https://addons.mozilla.org/firefox/addon/temporary-containers/
# ============================================================================
# FIREFOX ADVANCED HARDENING
# ============================================================================
# User.js hardening (arkenfox template)
cd ~/.mozilla/firefox/*.default-release/
wget https://raw.githubusercontent.com/arkenfox/user.js/master/user.js
# Customize user.js overrides
# Create user-overrides.js for site-specific settings
# Apply updates to user.js
cd ~/.mozilla/firefox/*.default-release/
wget https://raw.githubusercontent.com/arkenfox/user.js/master/updater.sh
bash updater.sh
# ============================================================================
# CHROMIUM/BRAVE HARDENING
# ============================================================================
# Chrome/Brave flags (chrome://flags)
# Enable: Strict site isolation
# Enable: Block third-party cookies
# Disable: WebRTC IP handling
# Brave Shield settings
# Settings → Shields → Trackers & ads blocking: Aggressive
# Settings → Shields → Block fingerprinting: Strict
# Settings → Shields → Block cookies: Block third-party cookies
# Chrome extensions (same as Firefox)
# uBlock Origin, Privacy Badger, HTTPS Everywhere, Decentraleyes
# ============================================================================
# SEARCH ENGINE CONFIGURATION
# ============================================================================
# Privacy-respecting search engines
# DuckDuckGo: https://duckduckgo.com
# Startpage: https://startpage.com
# Searx instances: https://searx.space
# Brave Search: https://search.brave.com
# Set custom search engine in Firefox
# Settings → Search → Default Search Engine
# Add Searx instance
# Settings → Search → Find More Search Engines → Add manually
# ============================================================================
# FINGERPRINTING TESTS
# ============================================================================
# Test browser fingerprint uniqueness
# Cover Your Tracks (EFF): https://coveryourtracks.eff.org/
# AmIUnique: https://amiunique.org/
# BrowserLeaks: https://browserleaks.com/
# Test WebRTC leak
# WebRTC Leak Test: https://browserleaks.com/webrtc
# Test DNS leak
# DNS Leak Test: https://dnsleaktest.com/
# ============================================================================
# PRIVACY-FOCUSED PROFILES
# ============================================================================
# Firefox Multi-Account Containers
# Install: https://addons.mozilla.org/firefox/addon/multi-account-containers/
# Create separate profiles for different activities
# Personal, Work, Shopping, Banking, Anonymous
# Firefox profile manager
firefox -ProfileManager
# Launch with specific profile
firefox -P "ProfileName"
# ============================================================================
# COOKIE & STORAGE MANAGEMENT
# ============================================================================
# Cookie settings (Firefox)
# Settings → Privacy & Security → Cookies and Site Data
# Delete cookies and site data when Firefox is closed
# Clear history on exit
# Settings → Privacy & Security → History → Clear history when Firefox closes
# Select: Browsing & download history, Cookies, Cache, Active logins
# Storage inspection (Firefox)
# about:preferences#privacy → Cookies and Site Data → Manage Data
# Clear all data
# CTRL+SHIFT+DEL → Select "Everything" → Clear Now
# ============================================================================
# USER-AGENT SPOOFING
# ============================================================================
# User-Agent Switcher extension
# Install: https://addons.mozilla.org/firefox/addon/uaswitcher/
# Common user agents to rotate
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
# ============================================================================
# SAFE BROWSING PRACTICES
# ============================================================================
# Always use HTTPS (check for padlock)
# Verify SSL certificates (click padlock → Connection is secure)
# Check URL for typos (phishing prevention)
# Never save passwords in browser (use password manager)
# Use separate browser for banking/sensitive accounts
# Never use public WiFi without VPN
# Clear cookies/cache regularly
# Disable auto-fill for forms
# Review browser permissions regularly (camera, mic, location)
# ============================================================================
# DISABLING BROWSER TELEMETRY
# ============================================================================
# Firefox telemetry (about:config)
toolkit.telemetry.enabled = false
toolkit.telemetry.unified = false
toolkit.telemetry.archive.enabled = false
datareporting.healthreport.uploadEnabled = false
datareporting.policy.dataSubmissionEnabled = false
browser.newtabpage.activity-stream.feeds.telemetry = false
browser.ping-centre.telemetry = false
# Brave telemetry
# Settings → Privacy and security → Usage data → Disable all
# Chrome telemetry
# Settings → Privacy and security → Sync and Google services → Disable all
# ============================================================================
# CONTAINER ISOLATION (FIREFOX)
# ============================================================================
# Enable First Party Isolation
privacy.firstparty.isolate = true
# Use Multi-Account Containers
# Separate: Shopping, Social Media, Banking, Work, Personal
# Configure container rules
# Assign domains to always open in specific containers
# Example: facebook.com → Social Media container
# Temporary Containers (auto-delete)
# Every new tab in isolated container
# Cookies/storage deleted on tab close
# ============================================================================
# PDF VIEWER HARDENING
# ============================================================================
# Disable JavaScript in PDF viewer (Firefox)
pdfjs.enableScripting = false
# Use external PDF viewer (more secure)
# Settings → Applications → PDF → Use system default
# Alternative: Send to external viewer
xdg-mime default evince.desktop application/pdf
# ============================================================================
# ADDITIONAL SECURITY MEASURES
# ============================================================================
# Disable WebAssembly (potential exploit vector)
javascript.options.wasm = false
# Disable WebGL (fingerprinting + GPU exploits)
webgl.disabled = true
# Disable battery status API (tracking)
dom.battery.enabled = false
# Disable gamepad API (fingerprinting)
dom.gamepad.enabled = false
# Disable clipboard API access
dom.event.clipboardevents.enabled = false
# ============================================================================
# SECURE BROWSER PROFILES
# ============================================================================
# Banking Profile (maximum security)
# - No extensions (except HTTPS Everywhere)
# - JavaScript required (for banking sites)
# - Cookies allowed for session only
# - Never save passwords
# - Clear all data on exit
# Anonymous Profile (maximum privacy)
# - Tor Browser or Mullvad Browser
# - NoScript enabled (block all JS by default)
# - No cookies
# - No WebRTC
# - Resist fingerprinting
# Daily Driver Profile (balanced)
# - uBlock Origin, Privacy Badger, Decentraleyes
# - Cookie AutoDelete
# - HTTPS-only mode
# - DoH enabled
# ============================================================================
# BROWSER UPDATE POLICY
# ============================================================================
# Always keep browser updated (critical security patches)
# Enable automatic updates
# Firefox updates
# Settings → General → Firefox Updates → Automatically install updates
# Check current version
firefox --version
# Manual update check
# Settings → Help → About Firefox
# ============================================================================
# CONTENT BLOCKING LISTS
# ============================================================================
# uBlock Origin filter lists
# Enable: Built-in, EasyList, EasyPrivacy, Malware domains, Annoyances
# Additional lists
# - Dan Pollock's hosts file
# - Peter Lowe's Ad server list
# - AdGuard filters
# Update filters regularly
# uBlock Origin dashboard → Filter lists → Update now
# ============================================================================
# TESTING HARDENING EFFECTIVENESS
# ============================================================================
# Browser fingerprinting test
https://coveryourtracks.eff.org/
# DNS leak test
https://dnsleaktest.com/
# WebRTC leak test
https://browserleaks.com/webrtc
# IP leak test (when using VPN)
https://ipleak.net/
# SSL/TLS test
https://www.ssllabs.com/ssltest/viewMyClient.html
# Check enabled features
https://browserleaks.com/javascript
# ============================================================================
# TROUBLESHOOTING
# ============================================================================
# Site broken after hardening
# Disable privacy.resistFingerprinting temporarily
# Allow JavaScript for specific site (NoScript)
# Allow third-party cookies for specific site
# Can't login to sites
# Check if cookies are blocked
# Disable tracking protection for specific site
# Allow localStorage
# Videos won't play
# Re-enable WebGL temporarily
# Allow DRM content (Settings → Privacy → DRM Content)
# Reset Firefox to defaults (if needed)
# about:support → Refresh Firefox
Reference in a new issue View git blame Copy permalink