cedric's bazaar

User Tools

Site Tools

Trace:
security:privacy

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
Last revisionBoth sides next revision
security:privacy [2015/05/24 14:26] – [Browser] cedricsecurity:privacy [2016/11/17 14:57] – cedric
Line 8: Line 8:
     * [[https://www.eff.org/https-everywhere |HTTPS Everywhere]];     * [[https://www.eff.org/https-everywhere |HTTPS Everywhere]];
     * [[https://www.eff.org/privacybadger | Privacy Badger]];     * [[https://www.eff.org/privacybadger | Privacy Badger]];
-    * [[https://addons.mozilla.org/en-US/firefox/addon/adblock-plus/ | Adblock Plus]]; +    * [[https://addons.mozilla.org/en-US/firefox/addon/ublock-origin | uBlock Origin]]; 
-    * [[https://addons.mozilla.org/en-US/firefox/addon/noscript/ | NoScript]] (only enable JavaScript on sites you trust, else enable temporally); +    * [[https://addons.mozilla.org/en-US/firefox/addon/noscript | NoScript]] (only enable JavaScript on sites you trust, else enable temporally); 
-    * [[https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-standard/ | FoxyProxy]]; +    * [[https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-standard | FoxyProxy]]; 
-    * [[https://addons.mozilla.org/en-US/firefox/addon/donottrackplus/ | DoNotTrackMe]]; +    * [[https://addons.mozilla.org/en-US/firefox/addon/geolocater | Geolocater]]. 
-    * [[https://addons.mozilla.org/en-US/firefox/addon/geolocater/ | Geolocater]]. +  * [[https://gist.github.com/cedricbonhomme/de05a2413273b8a3b7de | configurations]] in //about:config// with the file ''user.js'':
-  * [[https://bitbucket.org/snippets/cedricbonhomme/cbj6 | configurations]] in //about:config//: +
-    * set the value of //browser.search.suggest.enabled// to //false//; +
-    * set the value of //network.http.sendRefererHeader// to //0// (you may experience some problems with CSRF); +
-    * set the value of //geo.enabled// to //false//; +
-    * set the value of //browser.urlbar.trimURLs// to //false//; +
-    * set the value of //browser.urlbar.formatting.enabled// to //false//; +
-    * set the value of //javascript.enabled// to //false// (in this case no need to install NoScript); +
-    * set the value of //privacy.trackingprotection.enabled// to //true//.+
   * Firefox preferences:   * Firefox preferences:
     * in the privacy tab precise that you do not want to be tracked by sites;     * in the privacy tab precise that you do not want to be tracked by sites;
-    * do not accept cookies from sites and allow (for session only) sites you trust ([[http://blog.cedricbonhomme.org/2013/08/04/nouvelle-attaque-sur-les-utilisateurs-de-tor/ | example]]);+    * do not accept cookies from sites and allow (for session only) sites you trust ([[http://blog.cedricbonhomme.org/2013/08/04/nouvelle-attaque-sur-les-utilisateurs-de-tor | example]]);
   * install [[https://www.torproject.org/ | Tor]]/Privoxy and use FoxyProxy to switch faster between Tor and the "no proxy" mode;   * install [[https://www.torproject.org/ | Tor]]/Privoxy and use FoxyProxy to switch faster between Tor and the "no proxy" mode;
   * do not use Tor without HTTPS on sensible sites;   * do not use Tor without HTTPS on sensible sites;
-  * if you are not already using all Google services you can use Google's DNS (8.8.8.8 and 8.8.4.4).+  * avoid using Google DNS (even if they are fast and reliable). Prefer [[https://www.fdn.fr/actions/dns/ | French Data Network]] DNS resolvers (80.67.169.12, 80.67.169.40).
  
 Another good solution is to use the [[https://www.torproject.org/projects/torbrowser.html.en | Tor Browser]] which is based on Firefox and pre-configured  with the best settings for your privacy and uses the Tor network by default. No technical knowledge is required. Another good solution is to use the [[https://www.torproject.org/projects/torbrowser.html.en | Tor Browser]] which is based on Firefox and pre-configured  with the best settings for your privacy and uses the Tor network by default. No technical knowledge is required.
  
 If you are using a public computer I recommend you [[https://tails.boum.org/ | Tails]]. If you are using a public computer I recommend you [[https://tails.boum.org/ | Tails]].
 +
 +==== Firefox preferences ====
 +
 +=== User preferences ===
 +
 +<html><script src="https://gist.github.com/cedricbonhomme/de05a2413273b8a3b7de.js"></script></html>
 +
 +=== Privacy ===
 +
 +{{ :security:firefox_configuration.png |}}
 +
  
 ===== Browsing advices ===== ===== Browsing advices =====
Line 66: Line 69:
   * DukGo or another Jabber/XMPP service. Use [[https://otr.cypherpunks.ca/ | Off-the-Record]] (OTR), easy with Pidgin or Kopete;   * DukGo or another Jabber/XMPP service. Use [[https://otr.cypherpunks.ca/ | Off-the-Record]] (OTR), easy with Pidgin or Kopete;
   * a worth watching project: [[https://trac.torproject.org/projects/tor/wiki/org/meetings/2014WinterDevMeeting/notes/RoadmapTIMB | TIMB]];   * a worth watching project: [[https://trac.torproject.org/projects/tor/wiki/org/meetings/2014WinterDevMeeting/notes/RoadmapTIMB | TIMB]];
 +  * another interesting project: [[https://ricochet.im | Ricochet]];
   * IRC.   * IRC.
  
Line 76: Line 80:
  
 Of course, this list is not exhaustive. Of course, this list is not exhaustive.
 +
 +===== /etc/hosts =====
 +
 +The content of my ''/etc/hosts'' file is based on [[http://someonewhocares.org/hosts/ | this very good example]].
 +
 +
  
 ===== DNS ===== ===== DNS =====
Line 95: Line 105:
 # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
 #     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN #     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
-nameserver 8.8.8.8 +# French Data Network DNS resolvers 
-nameserver 8.8.4.4+nameserver 80.67.169.12 
 +nameserver 80.67.169.40
  
 # resolvconf -u # resolvconf -u
Line 116: Line 127:
 netmask 255.255.255.0 netmask 255.255.255.0
 gateway 192.168.1.1 gateway 192.168.1.1
-dns-nameservers 8.8.8.8 8.8.4.4+dns-nameservers 80.67.169.12 80.67.169.40
 </code> </code>
  
Line 126: Line 137:
 # exit # exit
 $ nslookup cedricbonhomme.org $ nslookup cedricbonhomme.org
-Server:         8.8.8.8 +Server:         80.67.169.40 
-Address:        8.8.8.8#53+Address:        80.67.169.40#53
 </code> </code>
  
security/privacy.txt · Last modified: 2017/11/24 22:52 by cedric