Firefox addons

https://blog.mozilla.org/addons/2018/08/21/timeline-for-disabling-legacy-firefox-add-ons/

* this means updates for existing legacy extensions

 

quick'n'dirty Implementation of bookmark descriptions - for sidebar

source
https://www.reddit.com/r/firefox/comments/9ep8ts/bookmark_notes_quickndirty_replacement_for/

extension
https://addons.mozilla.org/firefox/addon/bookmark-notes/

Support
https://github.com/emmyemi/bookmark-notes/issues

manual
- install extension
- export bookmarks as html file (descriptions available up to firefox 63)
- open about:addons -> then "bookmark notes", scroll down
- open exported html file, wait until "Import" appears clickable, then click
- wait until process has finished
- open sidebar -> "bookmark notes" and have fun with imported descriptions (only there) - click on bookmark to view/edit

 

How to immunise your browser from the latest security threats

http://www.itpro.co.uk/security/32216/how-to-immunise-your-browser-from-the-latest-security-threats

 

HTTPS Everywhere 2018.10.31 (October 31, 2018)

 

dont follow this instructions and forget it completely.
those extensions (avast, ghostery, I Don't Care About Cookies) are known to cause culprits ever and ever. and uMatrix is no good for unexperienced users - in general its a wrong suggestions - using uBlock is the better choice. although uMatrix can use blocking lists its capabilities are not that powerful like uBlock - but both are superior to those other named extensions. uBlock replaces over a dozen other extensions in one. just learn about capabilities and try out!
https://github.com/gorhill/uBlock/wiki

the only recommendation from article is:
"Cookies AutoDelete"

 

The best Firefox privacy guide is:

https://restoreprivacy.com/firefox-privacy/

It is wrong to consider the same tips as valid even for Chrome.

 

Thnx for this link. Will test some of those settings

 

You can also take a look at this: https://github.com/ghacksuserjs/ghacks-user.js
I use it. It's neat to have them all in a file. But you definitely have to do some changes to it! It's a template after all. Make sure to read everything, including the user.js.
The site give also tips for what extensions to choose. (It mostly coincides with Sampei Nihiras link.)

I found this to be the best ressource for anything related to user_prefs/about:config! (and stock firefox)


Here are my overrides:

Code:

user_pref("browser.startup.page", 3);                            // 0102

user_pref("extensions.screenshots.disabled", true);             // 0515
user_pref("extensions.screenshots.upload-disabled", true);         // 0515

user_pref("keyword.enabled", true);                                // 0801
user_pref("browser.search.suggest.enabled", true);                // 0807
user_pref("browser.urlbar.suggest.searches", true);                // 0808
user_pref("browser.urlbar.autocomplete.enabled", true);            // 0850a
user_pref("browser.urlbar.suggest.history", true);                 // 0850a
user_pref("browser.urlbar.suggest.bookmark", true);             // 0850a
user_pref("browser.urlbar.suggest.openpage", true);                // 0850a
user_pref("browser.urlbar.autoFill", true);                        // 0850d
user_pref("browser.urlbar.autoFill.typed", true);                   // 0850d

user_pref("browser.sessionstore.max_tabs_undo", 10);            // 1020
user_pref("browser.sessionstore.max_windows_undo", 1);            // 1020

user_pref("browser.startup.homepage", "https://new.startpage.com/do/mypage.pl?prfh=suggestionsEEE1N1Ngeo_mapEEE1N1Nwikipedia_iaEEE1N1Nother_iaEEE1N1Ndisable_open_in_new_windowEEE1N1Ndisable_video_family_filterEEE1N1Nenable_post_methodEEE1N1Nenable_proxy_safety_suggestEEE1N1Ndisable_family_filterEEE1N1NsslEEE1N1Nlanguage_uiEEEenglishN1NlanguageEEEenglishN1Nwt_unitEEEcelsiusN1Nnum_of_resultsEEE20N1Nlang_homepageEEEs/dark/en/");    //0103

//user_pref("font.name.serif.x-unicode", "Georgia");            // 1402
//user_pref("font.name.serif.x-western", "Georgia");            // 1402 default: Times New Roman
//user_pref("font.name.sans-serif.x-unicode", "Arial");            // 1402
//user_pref("font.name.sans-serif.x-western", "Arial");            // 1402 default: Arial
//user_pref("font.name.monospace.x-unicode", "Lucida Console");    // 1402
//user_pref("font.name.monospace.x-western", "Lucida Console"); // 1402 default: Courier New

//user_pref("media.gmp-widevinecdm.visible", true);                // 1825   --- These are for Netflix ---
//user_pref("media.gmp-widevinecdm.enabled", true);                // 1825
//user_pref("media.gmp-widevinecdm.autoupdate", true);            // 1825
//user_pref("media.eme.enabled", true);                             // 1830
//user_pref("browser.eme.ui.enabled", false);                     // 1830   --- Netflix stuff end ---

/* 1840: disable the OpenH264 Video Codec by Cisco to "Never Activate"
 * This is the bundled codec used for video chat in WebRTC ***/
//user_pref("media.gmp-gmpopenh264.enabled", false); // (hidden pref)
//user_pref("media.gmp-gmpopenh264.autoupdate", false);
user_pref("media.autoplay.default", 2);                            // 2030 0=Allowed (default), 1=Blocked, 2=Prompt
user_pref("media.autoplay.enabled", true);

user_pref("full-screen-api.enabled", true);                        // 2204

user_pref("privacy.clearOnShutdown.history", false);            // 2803
user_pref("privacy.clearOnShutdown.cookies", false);            // 2803

user_pref("privacy.firstparty.isolate", true);                     // 4001 true COULD break Cookie AutoDelete and some login pages. try it

user_pref("browser.backspace_action", 0);                        // 5000 0=previous page, 1=scroll up, 2=do nothing
user_pref("browser.tabs.closeWindowWithLastTab", false);        // 5000
user_pref("browser.tabs.loadBookmarksInTabs", true);            // 5000

Just open the downloaded user.js in notepad++ (best to have it anyway) and search for the number behind the comment slashs: //
You'll find an explanation for what they do there, if the name isn't explanation enough. They enable some basic features that would have been deactivated otherwise.

 

Thank you. Will check it out.

 

Be careful, though, that you backup your profile first before applying a user.js, particularly a comprehensive one like the gHacks user.js.

 

Thnx. Yes I always backup my system when making similar changes.

 

You can use MozBackup in this case. That saves you the time to re-image the whole disk.

 

Chameleon, the successor of Random Agent Spoofer: https://addons.mozilla.org/en-US/firefox/addon/chameleon-ext/
I think this addon already has some nicer features than RAS ever has (Anti Etag Tracking is better, automatic timezone spoofing according to IP is really interesting, client rects spoofing is a new feature etc). Moreover it is regularly updated, and the dev. is really open minded.

Nevertheless, concerning eg spoofing client rects or protecting window.name, I prefer to use CanvasBlocker because CB allows a much more granular whitelisting.

 

If you trust that it has been abandoned since May 2012 ...

I used to use FEBE for this but it was also not continued with the advent of WebExtensions. Dunno if there is any new equivalent, so I guess manual profile copy is the only option.

I just like to be able to have a scheduled backup task, in case of 'unexpected breakages'.

Edit: Anyone tried this: Hekasoft Backup & Restore? http://www.hekasoft.com/hekasoft-backup-restore/. Sorry to be a bit OT here.

 

hekasoft is specific. winrar is generic and can do commandline same way.

Code:

winrar a -r -agYYYY-MM-DD_HH-MM -inul x:\firefox_backup_ %appdata%\Mozilla\Firefox
rar a -r -agYYYY-MM-DD_HH-MM -inul x:\firefox_backup_ %appdata%\Mozilla\Firefox

modify drive/path and name (x:\firefox_backup_) as you need - this works also with the trial and no nags.

recover is also possible this way, incl deleting or backing up before (batch/powershell)

mozbackup is dropped because buggy, lots of bugs, and age. it is neither nor compatible to current firefox.

i noticed more "domrect" messages now, also google - google images wont load more images.

 

It worked fine for me. If you manually copy the profile files over to another profile, you'll find that the old profile name/path is written in several files. That could cause issues. But if you only need/have/want one profile that's no issue, of course.


EDIT: Does anyone know a extension that only spoofes timezone according to IP? I already have so many, I don't want another one doing mostly the same thing as others. (chameleon)

 

Thanks @Brummelchen. Haven't used WinRAR before, but will give this a try!

 

win764bit, sandboxie5.26,VS4.64, norton ns22, unchecky, nvt OSarmore,firefox63.0.1/UBO as only extension.been reading about Decentraeyes extension. anyone using this and do you think it is worthwhile? thanks

 

The author here seems to think so: https://restoreprivacy.com/firefox-privacy/ (post #183)

I am using it myself ... @summerheat - your view?

 

Some advice:

For Chrome:

https://decentraleyes.org/configure-https-everywhere/

_____________________________________________

https://git.synz.io/Synzvato/decent...es-from-cdns-i-block-using-a-different-add-on

 

I use it too. It makes sense to feed local scripts and stuff in order to appear less unique to other scripts that try to fingerprint you by looking at what ads you block. Does it have another use I'm unaware of? MAybe I totally misunderstood the addon.

 

Spoof TimeZone theoretically does that but 1) The way Chameleon spoofs TimeZone is far better 2) Spoof Timezone's settings tend to randomly reset from time to time, without sending any notification, so overall its "spoofing timezone according IP" functionality is not reliable..

By the way, Chameleon has some features that several others addons have (webrtc leak prevention, referer spoofing...), but it has others features that only a few other addons have (eg client rects spoofing, window.name protection, Etag Tracking prevention, authorization disabling, Upgrade Insecure Requests...), and some others it is almost the only one to have (reg Screen Size and TimeZone spoofing, particularly TimeZone spoofing according IP).

Moreover globally its spoofing features are better implemented than they are in many others specific dedicated addons (eg UA spoofing or TimeZone Spoofing), so that I ended replacing many others addons with only two: Canvas Blocker and Chameleon. I found it a logical move.