• masterofn001
    link
    fedilink
    English
    83
    edit-2
    3 days ago

    You can also use canvas blocker add-on.

    Use their containers (firefox multi-account container add-on) feature and make a google container so that all google domains go to that container.

    If you want to get crazy, in either set in about:config or make yourself a user.is file in your Firefox profile directory and eliminate all communication with google. And some other privacy tweaks below.

    google shit and some extra privacy/security settings

    Google domains and services:

    user_pref(“browser.safebrowsing.allowOverride”, false);
    user_pref(“browser.safebrowsing.blockedURIs.enabled”, false);
    user_pref(“browser.safebrowsing.downloads.enabled”, false);
    user_pref(“browser.safebrowsing.downloads.remote.block_dangerous”, false);
    user_pref(“browser.safebrowsing.downloads.remote.block_dangerous_host”, false);
    user_pref(“browser.safebrowsing.downloads.remote.block_potentially_unwanted”, false):
    user_pref(“browser.safebrowsing.downloads.remote.block_uncommon”, false);
    user_pref(“browser.safebrowsing.downloads.remote.enabled”, false);
    user_pref(“browser.safebrowsing.downloads.remote.url”, “”);
    user_pref(“browser.safebrowsing.malware.enabled”, false);
    user_pref(“browser.safebrowsing.phishing.enabled”, false);
    user_pref(“browser.safebrowsing.provider.google.advisoryName”, “”);
    user_pref(“browser.safebrowsing.provider.google.advisoryURL”, “”);
    user_pref(“browser.safebrowsing.provider.google.gethashURL”, “”);
    user_pref(“browser.safebrowsing.provider.google.lists”, “”);
    user_pref(“browser.safebrowsing.provider.google.reportURL”, “”);
    user_pref(“browser.safebrowsing.provider.google.updateURL”, “”);
    user_pref(“browser.safebrowsing.provider.google4.advisoryName”, “”);
    user_pref(“browser.safebrowsing.provider.google4.advisoryURL”, “”);
    user_pref(“browser.safebrowsing.provider.google4.dataSharingURL”, “”);
    user_pref(“browser.safebrowsing.provider.google4.gethashURL”, “”);
    user_pref(“browser.safebrowsing.provider.google4.lists”, “”);
    user_pref(“browser.safebrowsing.provider.google4.pver”, “”);
    user_pref(“browser.safebrowsing.provider.google4.reportURL”, “”);
    user_pref(“browser.safebrowsing.provider.google4.updateURL”, “”);

    Privacy and security stuff:

    user_pref(“dom.push.enabled”, false);
    user_pref(“dom.push.connection.enabled”, false);

    user_pref(“layout.css.visited_links_enabled”, false);
    user_pref(“media.navigator.enabled”, false);

    user_pref(“network.proxy.allow_bypass”, false);
    user_pref(“network.proxy.failover_direct”, false);
    user_pref(“network.http.referer.spoofSource”, true);

    user_pref(“security.ssl.disable_session_identifiers”, true);
    user_pref(“security.ssl.enable_false_start”, false);
    user_pref(“security.ssl.treat_unsafe_negotiation_as_broken”, true);
    user_pref(“security.tls.enable_0rtt_data”, false);

    user_pref(“privacy.partition.network_state.connection_with_proxy”, true);

    user_pref(“privacy.resistFingerprinting”, true);
    user_pref(“privacy.resistFingerprinting.block_mozAddonManager”, true);
    user_pref(“privacy.resistFingerprinting.letterboxing”, true);
    user_pref(“privacy.resistFingerprinting.randomization.daily_reset.enabled”, true);
    user_pref(“privacy.resistFingerprinting.randomization.enabled”, true);

    user_pref(“screenshots.browser.component.enabled”, false);

    user_pref(“privacy.spoof_english”, 2);

    user_pref(“webgl.enable-debug-renderer-info”, false); user_pref(“webgl.enable-renderer-query”, false);

      • Krik
        link
        fedilink
        English
        233 days ago

        Or you just switch to LibreWolf where all these settings are already set. It even comes with uBlock preinstalled.

        • Refurbished Refurbisher
          link
          fedilink
          English
          73 days ago

          Or Mullvad Browser, which is just the Tor Browser without Tor.

          There’s also IronFox on Android which is more similar to LibreWolf than MV Browser.

    • @[email protected]
      link
      fedilink
      English
      93 days ago

      I’m still trying to wrap my head around fingerprinting, so excuse my ignorance. Doesn’t an installed plugin such as Canvas Blocker make you more uniquely identifiable? My reasoning is that very few people have this plugin relatively speaking.

      • @[email protected]
        link
        fedilink
        English
        23 days ago

        Iirc, Websites can’t query addons unless those addons manipulate the DOM in a way that exposes themselves.

        They can query extensions.

        Addons are things installed inside the browser. Like uBlock, HTTPS Everywhere, Firefox Containerr, etc.

        Extensions are installed outside the browser. Such as Flashplayer, the Gnome extensions installer, etc.

        • @[email protected]
          link
          fedilink
          English
          13 days ago

          Further: the Canvas API doesn’t have any requirements on rendering accuracy.

          By deferring to the GPU, font library, etc, tracking code can generate an image that is in most cases unique to your machine.

          So blocking the Canvas API would return a 0. Which is less unique than what it would be normally.

      • @[email protected]
        link
        fedilink
        English
        23 days ago

        Maybe if they can connect you to your other usage but it’s probably more of their resources and such a small % of the population that it isn’t worth the time to subvert? Idk just guessing here

    • @[email protected]
      link
      fedilink
      English
      23 days ago

      I use (and love) Firefox containers, and I keep all Google domains in one container. However, I never know what to do about other websites that use Google sign in.

      If I’m signing into XYZ website and it uses my Google account to sign in, should I put that website in the Google container? That’s what I’ve been doing, but I don’t know the right answer.