Skip Navigation

Posts
4
Comments
242
Joined
8 mo. ago

  • You can lie, but that doesnt mean that a website cant still tell your base OS if they use JS platform fingerprinting. Arkenfox, the base config which Librewolf is based off of says the exact same thing. Go to CreepJS and see it get your platform regardless.

  • Except websites can tell what base OS you run using browser fingerprinting. It os impossible to lie aboit your OS because of the differences in platforms.

  • No, because the Mozilla's new policy doesnt apply to forks.

  • The fingerprint protections in Librewolf already protect against canvas fingerprinting. You actually make ourself stand out even mkre by using it. Even with RFP disable, ETP still protects against canvas fingerprinting.

  • Idk why, it doesnt say anything on their gitlab about changing that. Maybe it is a problem with the build process? I remember on Mull a couple months ago i did a clean install and RFP was disabled. You can just enable it if you want.

  • It is important if you care. They sign releases with the same Tor Browser key. Instructions are found on this page: https://mullvad.net/en/help/verifying-mullvad-browser-signature

    You need 2 files (both are on the download page):

    • Browser file
    • Signature file

    The basic process is as follows:

    1. Obtain signing key.
    2. Verify browser using signature file.

    Note: Ignore warning about the key not being signed with a trusted key (we skip an unnecessary step for a begineer walkthrough)

    You can double check everything I said by looking at their instructions.

  • Technically, the best way to blend in is to avoid changing the behaviour much from the default. I would still advise the below settings because they do improve your security, and anti-fingerprinting against naive first-party fingerprinting scripts (all 3rd party scripts/iframes should be blocked, see below: uBlock Medium/Hard). If you need protection against advanced fingerprinting use Tor/Mullvad browser.

    uBlock:

    • Change uBlock blocking mode to Medium or Hard using the instructions on their Github wiki. Can cause site breakage on shitty websites (eg sites that import large JS libraries from remote sources). It is a substantial improvement over default, see the wiki for medium mode: https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium-mode
    • Enable filterlist Privacy>Block Outside Intrusion to LAN (Access to LAN is used to fingerprint or by threat actors during reconnaissance phase of hacking)
    • Consider enabling other filterlists included in uBlock. Try to minimize enabling extra lists from the default to avoid further fingerprinting.

    Librewolf:

    • Enable limiting of referrers under LibreWolf Preferences>Privacy>Limit cross-origin referers
    • Enable letterboxing under LibreWolf Preferences>Fingerprinting>Enable letterboxing
  • For me, no matter how good their browser is, I ain't going to use it. If someone forks it to remove the BAT crypto nonesense id consider using it. I've been tempted to compile chromium from source and just add brave-core content/fingerprint blocking. Ideally, any fork would maintain the same general fingerprint with brave.

    For now, Cromite is the way to go in-terms of hardened Chromium with built-in adblocking and without Google nonesense. The only downside is their choice to use Adblock Plus engine, but this is for the technical reason that engine is inferior to uBlock Origin and Brave Shields. The inclusion of ABP doesn't effect privacy (ik people will understandably mention the ABP scandal) because they forked ABP and use custom filter lists, which is still a very good benefit above vanilla Chromium.

  • It is recommended for activists, but it really can be for anyone. It is basically just Android and your grandmother could daily drive it about as well as any other Android OS. It's solid, security hardened, gives extra security toggles, and extends device longevity past being made ewaste by EOL. I was hesitant at first to use it, especially given its cult-ish community, but it really has "just worked".

  • Permanently Deleted

    Jump
  • The ones I liked the most was Kusal and Lessac.

  • Permanently Deleted

    Jump
  • I do agree that smartphone have gotten too large to be reasonably comfortable.

  • You could rebase to Secureblue, but that would replace Bazzite.

  • I have no idea about any smaller phones.

    Is the phone size a problem because it is hard to hold? If so, maybe try one of those things that you stick on the back of your phone as a handle (pop-socket?)

  • Hypatia, and all other Divested apps, are dead. The Dev (Tavi) is done with their Android projects.

  • Mostly because Fedora is more popular. I like both.

    openSUSE Tumbleweed gives you much more control of what gets installed by default (you can customize every package during the GUI installer). It has been the most stable distro ive used. It is a "rolling-release" distro, meaning that packages usually get updates quicker from upstream. If you dont like getting frequent updates it may not be for you. A key feature of openSUSE distros is the system management apl Yast, which allows you to manage a lot of stuff from a GUI.

    Fedora is also quite stable. I think it's more user-friendly in my experience. After Debian/Ubuntu based distros, Fedora is the most likely to have packages built for it by developers (I'm talking 1st-party builds, not repacks). Fedora is a semi-rolling release, meaning updates are frequent but not constant.

    Fedora is currently my distro off choice, but I may soon use Tumbleweed again. I daily drove Tumbleweed for a year on both my general PC and my admin computer.

  • glibc == gnu C library

    It is the standard C library used on GNU/Linux systems. Basically, it is very important. I've also heard that the code is a rats nest. I wish standard distros would move to musl libc.

  • I saw this as well. I just use Flatseal (or KDE's builtin Flatpak permission manager) to remove any permissions I don't like. I do that for all apps.

    If I was on my PC, I could reply with my Flatpak overrides. If I remember I'll reply here.

    TL;DR Yes, go for it it'll be fine.