Firefox extensions for security & privacy

bo, thank you for sharing your valuable experience. That's definitely what none of other tools offers now, and I hope every NS user follows your practice.

Those who don't use NS for some reason instead have to equip "behavior patch" which has its own cost, but probably most ppl have neither.

 

Hi
I always run AdGuard Tracking Protection filter in uBlock Origin.
I'm wondering whether Firefox Content Blocking (Trackers) might bump into AdGuard Tracking Protection filter.
I'm wondering whether Firefox Content Blocking (Disconnect Block Lists) does anything with AdGuard Tracking Protection filter on-board.
I'm wondering whether Firefox Trackers, Cryptominers and Fingerprinters filters do anything with my uBlock Origin filters on-board.
I'm wondering whether too many filters (read Firefox filters) spoils my Firefox.

Spoiler: uBlock Origin filters

Thanks

 

They don't conflict as work in different timing. Indeed, I observed if I enabled FxTP I see less blocking in uBO logger. A paper showed blockage by Disconnect doesn't fully overlap w/ uBO default lists, and given AGTP is independent from Disconnect, combining FxTP w/ AGTP will increase tracking protection. In my experience, FxTP + AGTP is less FP-prone than EasyPrivacy. While AGTP is often quicker to add new tracker domains than EP, AGTP misses quite many 1st party tracker such as /analytics/?event=, /pv.php?id=, /xhr/api/v2/collector, /js/analytics.js, just to name a few, which are covered by aggressive generic rules in EP tho they're double-edged sword. The major problem of adding too many filters is FP, which is not always easy to notice. Sometimes a click doesn't work, other times menu or search results show fewer contents.

One thing I noticed: why you added AG lists in custom filter when they're included in default categories? If you took them from AG filters page, I recommend to remove them and use default ones, as these are optimized for uBO. uBO does not understand all AG syntax (e.g. $$ argument is not compatible and will never be) so they provide uBO-optimized filters and this is the default ones, tho uBO ignores what it doesn't understand.

 

Yes, I prefer sourcing from AdGuard filters vs Easy filters.
Yes, I take AdGuard filters from AdGuard page.
http://adguard.com/filters.html#english
I thought Custom would be the same as thru uBO since, I'm also using uBlock Built-in.
At the time I setup uBO filters. uBlock Origin, as I recall, was not offering all AdGuard filters as default. So, I thought Custom grouping AdGuard filters would be okay (better) since, I had long use with AdGuard (filters) browser extension.

So, Firefox filters do not conflict and combining FxTP w/ AGTP will increase tracking protection.

So, you'd recommend to use uBO default filters.

Hmm, I have some re-thinking to do.
Thanks!

 

@142395
Um, note numbers difference for AdGuard default thru uBO vs AdGuard direct thru Custom?
--
AdGuard default filters thru uBO

vs
AdGuard direct filters thru Custom

--
AdGuard Base filter direct:
Checksum: 0KGcg2mt5isWoShLjK+Cng
! Title: AdGuard Base filter
! Description: EasyList + AdGuard English filter. This filter is necessary for quality ad blocking.
! Version: 2.0.79.89
! TimeUpdated: 2019-10-16T17:31:03+03:00
! Expires: 2 days (update frequency)
! Homepage: http://adguard.com/filters.html#english
vs
AdGuard Base List default:
![Adblock Plus 2.0]
! Checksum: VgsIjS9tALpeCs5ovXvKhA
! Title: AdGuard Base filter
! Description: This filter is necessary for quality ad blocking.
! Version: 2.0.79.89
! TimeUpdated: 2019-10-16T17:31:03+03:00
! Expires: 2 days (update frequency)
! Homepage: http://adguard.com/filters.html#english

Just seems like with AdGuard "default" ....I'd need to add Easy List....whereas with AdGuard "direct".... Easy List is builf-in and presume AdGuard optimized.
Guess, that's one reason I imagined AdGuard "direct" as better.

 

I was just about to write about that but you're faster.
AG Base filter = AG Base List + EasyList - hundreds of problematic rules.

The last term, hundreds of rules will be left if you subscribe AGBL + EL. If you don't like this you can still use AGBF, tho it includes uBO-incompatible rules, meaning more workload every time the filter updates and uBO compiles this.

You may still see some diff in #, but probably that's because uBO counts some incompatible rules (also there can be a little timing difference btwn official AG lists and their uBO-compatible counterparts on update).

 

RE: but you're faster.
> faster...but, I was still editing.

Hmm, so AG Base filter (AdGuard direct thru Custom) vs AG Base List + Easy List (AdGuard default thru uBO)
--
AdGuard direct filters thru Custom

vs AG Base List + Easy List


And which iteration offers fewer uBO-incompatible rules?

RE: you can still use AGBF, tho it includes uBO-incompatible rules, meaning more workload every time the filter updates and uBO compiles this.

> Um, my uBO setup is not Auto-update.

 

For those using NoScript only (no adblockers) I would like to know how you
block youtube video ads in Firefox browser and any forks?
There use to be NS surrogates you could use/add, but don't know what works.
(Include legacy and webextension versions of NoScript)

uBO can easily block youtube ads with EL filters checked.

 

One correction for a past post in this thread. I wrote you're practically safe if you separate browser profiles, 'cause what an attacker can do is at most e.g. forcing you to make an anonymous post to a vulnerable comment form, but I have reminded that Japanese police arrested bunch of ignorant ppl for death threat or bomb threat just because the posts were done from their IPs. Ridiculous, but it's fact. The real criminal mostly used malware to remotely ctrl their PCs, but in some cases abused CSRF instead. So if you live in a country where you can be arrested just because your IP made a bad anonymous post, you may want more protection - but anyway most cases are already covered.

 

Nice thread. After shying away from Firefox for many years, trying to get back into it again. Lots of good info here. Thanks all.

For starters, here are my uBO settings. What should I change here?

 

@Trooper

It really depends on the browser + OS.
These are my rules with New Moon + W.XP:

 

Understand. I should probably make my post in the uBO thread as not to derail this one.

Question. Can anyone recommend an extension to block autoplay of videos? Not just for YouTube but for any site?

 

How so? Blocking ads and trackers should be independent of the browser and OS you're using.

 

An extension is not needed as you can set in Firefox for each site to your needs.

 

How would you do that then? Seems to me that an extension would be easier.

 

If you open the settings and go to Privacy & Security then scroll down to Autoplay in the Permissions section you can set the Default for all websites to Block Audio & Video. Then you can set exceptions for individual sites if you wish for them to Autoplay. It's a good enough solution for me. I've yet to encounter an extension that worked as advertised.

 

1. Just click the padlock for the respective site.
2. Click the arrow on the right side ("Show connection details")
3. Click "More information"
4. Select the Permissions tab and change whatever you want

 

Does not seem to work for YouTube. Basically I do not want videos to start playing when I first click on them. I want them to start when I want them to. I will have to test other sites for autoplay in general. Is there such an extension for YouTube?

 

As an example, if anti-phishing protection is not present with the browser used, the user should consider an integration of lists that can protect this aspect.

Another example see "Built-In" the "uBlock filters -Legacy" my rules?
With my browser and used OS are necessary.
With your browser and your OS they probably won't be present.

 

You should not need an extension for YouTube. There is an autoplay button on the page near the top right. Turn it off. You will have to do this per browser. Unless you clear your cache/history/cookies every time the setting should stick.

 

Do you have to be signed in to see this? Not noticing anything. I also clear cache/cookies etc daily.

 

See this for more detail:
https://www.businessinsider.com/how-to-turn-off-autoplay-on-youtube

 

Got all that guys, thanks. It is just not behaving like an old extension I used for Chrome.

Looks like I am just using Firefox at home. It does not run as good on my work laptop. It's a shame but it is what it is.