1
0
mirror of https://github.com/yokoffing/Betterfox.git synced 2026-06-12 15:40:48 +05:30

SecureFox updates Feb 2021 (#7)

* Missing "user_" in Telemetry section

Removed duplicates:
user_pref("toolkit.telemetry.unified", false);
user_pref("toolkit.telemetry.server", "");

* add note of breakage with password generator

* note default

* "Strict" tracking protection enables dFPI

* leave content blocking on Custom for now

* Strict = dFPI for all release channels

* remove cache_isolation (superseded by privacy.partition.network_state)

https://bugzilla.mozilla.org/show_bug.cgi?id=1687618

* TP hyperlinks

* comment out unused

* add urlbar.trimURLs

* Total Cookie Protection
This commit is contained in:
yokoffing
2021-02-24 11:38:06 -05:00
committed by GitHub
parent 0cba80fc86
commit 070237cf70
+136 -130
View File
@@ -11,7 +11,7 @@
* SecureFox * * SecureFox *
* "Natura non constristatur." * * "Natura non constristatur." *
* priority: provide sensible security and privacy * * priority: provide sensible security and privacy *
* version: 17 February 2021 * * version: February 2021 *
* url: https://github.com/yokoffing/Better-Fox * * url: https://github.com/yokoffing/Better-Fox *
****************************************************************************/ ****************************************************************************/
@@ -19,35 +19,69 @@
* SECTION: TRACKING PROTECTION * * SECTION: TRACKING PROTECTION *
****************************************************************************/ ****************************************************************************/
// PREF: Network Partitioning
// Network Partitioning will allow Firefox to save resources like the cache, favicons, CSS files, images, and more
// on a per-website basis rather than together in the same pool.
// [1] https://www.zdnet.com/article/firefox-to-ship-network-partitioning-as-a-new-anti-tracking-defense/
// [2] https://github.com/privacycg/storage-partitioning#introduction
// [3] https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Privacy/State_Partitioning
// [4] https://blog.mozilla.org/security/2021/01/26/supercookie-protections/
user_pref("privacy.partition.network_state", true); // default
// PREF: Dynamic First-Party Isolation (dFPI) [aka Total Cookie Protection, Dynamic State Paritioning]
// TL;DR: Every website gets its own “cookie jar,” preventing cookies from being used to track you from site to site.
// A more web-compatible version of FPI, which double keys all third-party state by the origin of the top-level
// context. dFPI partitions user's browsing data for each top-level eTLD+1, but is flexible enough to apply web
// compatibility heuristics to address resulting breakage by dynamically modifying a frame's storage principal.
// FPI is strong but it comes at the expense of breakage (all cross-site logins won't work, e.g. Youtube and Google).
// dFPI allows isolating most sites while applying a set of heuristics to allow sites through the isolation
// in certain circumstances for usability.
// [1] https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Privacy/State_Partitioning#dynamic_state_partitioning
// [2] https://blog.mozilla.org/security/2021/02/23/total-cookie-protection/
user_pref("network.cookie.cookieBehavior", 5);
// PREF: Redirect Tracking Prevention
// All storage is cleared (more or less) daily from origins that are known trackers and that
// havent received a top-level user interaction (including scroll) within the last 45 days.
// [1] https://www.ghacks.net/2020/08/06/how-to-enable-redirect-tracking-in-firefox/
// [2] https://www.cookiestatus.com/firefox/#other-first-party-storage
// [3] https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Privacy/Redirect_tracking_protection
// [4] https://www.ghacks.net/2020/03/04/firefox-75-will-purge-site-data-if-associated-with-tracking-cookies/
// [5] https://github.com/arkenfox/user.js/issues/1089
user_pref("privacy.purge_trackers.enabled", true);
// PREF: Enhanced Tracking Protection (ETP) // PREF: Enhanced Tracking Protection (ETP)
// Tracking Content blocking will strip cookies and block all resource requests to domains listed in Disconnect.me. // Tracking Content blocking will strip cookies and block all resource requests to domains listed in Disconnect.me.
// Firefox deletes all stored site data (incl. cookies, browser storage) if the site is a known tracker and hasnt // Firefox deletes all stored site data (incl. cookies, browser storage) if the site is a known tracker and hasnt
// been interacted with in the last 30 days. // been interacted with in the last 30 days.
// [1] https://www.reddit.com/r/firefox/comments/l7xetb/network_priority_for_firefoxs_enhanced_tracking/gle2mqn/?web2x&context=3 // [NOTE] FF86: "Strict" tracking protection enables dFPI.
user_pref("browser.contentblocking.category", "custom"); // [1] https://blog.mozilla.org/firefox/control-trackers-with-firefox/
// [2] https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
// [3] https://www.reddit.com/r/firefox/comments/l7xetb/network_priority_for_firefoxs_enhanced_tracking/gle2mqn/?web2x&context=3
user_pref("browser.contentblocking.category", "strict");
user_pref("privacy.trackingprotection.enabled", true); user_pref("privacy.trackingprotection.enabled", true);
user_pref("privacy.trackingprotection.pbmode.enabled", true); /* default */ user_pref("privacy.trackingprotection.pbmode.enabled", true); // default
user_pref("privacy.trackingprotection.cryptomining.enabled", true); /* default */ user_pref("privacy.trackingprotection.cryptomining.enabled", true); // default
user_pref("privacy.trackingprotection.fingerprinting.enabled", true); /* default */ user_pref("privacy.trackingprotection.fingerprinting.enabled", true); // default
user_pref("privacy.trackingprotection.socialtracking.enabled", true); user_pref("privacy.trackingprotection.socialtracking.enabled", true); // default
user_pref("privacy.socialtracking.block_cookies.enabled", true); /* default */ user_pref("privacy.socialtracking.block_cookies.enabled", true);
// user_pref("browser.contentblocking.customBlockList.preferences.ui.enabled", false); // user_pref("browser.contentblocking.customBlockList.preferences.ui.enabled", true);
// PREF: Allow embedded tweets and Instagram posts to load in articles. // PREF: allow embedded tweets and Instagram posts
// [1] https://www.reddit.com/r/firefox/comments/l79nxy/firefox_dev_is_ignoring_social_tracking_preference/gl84ukk // [1] https://www.reddit.com/r/firefox/comments/l79nxy/firefox_dev_is_ignoring_social_tracking_preference/gl84ukk
user_pref("urlclassifier.trackingSkipURLs", "*.twitter.com, *.twimg.com"); /* hidden */ user_pref("urlclassifier.trackingSkipURLs", "*.twitter.com, *.twimg.com"); // hidden
user_pref("urlclassifier.features.socialtracking.skipURLs", "*.instagram.com, *.twitter.com, *.twimg.com"); /* hidden */ user_pref("urlclassifier.features.socialtracking.skipURLs", "*.instagram.com, *.twitter.com, *.twimg.com"); // hidden
// PREF: Disable Hyperlink Auditing (click tracking). // PREF: Hyperlink Auditing (click tracking).
user_pref("browser.send_pings", false); user_pref("browser.send_pings", false);
// Enforce same host just in case. // enforce same host just in case.
user_pref("browser.send_pings.require_same_host", true); user_pref("browser.send_pings.require_same_host", true);
// PREF: Disable sending additional analytics to web servers // PREF: sending additional analytics to web servers
// [1] https://developer.mozilla.org/docs/Web/API/Navigator/sendBeacon // [1] https://developer.mozilla.org/docs/Web/API/Navigator/sendBeacon
user_pref("beacon.enabled", false); user_pref("beacon.enabled", false);
// PREF: Disable battery status tracking // PREF: battery status tracking
user_pref("dom.battery.enabled", false); user_pref("dom.battery.enabled", false);
// PREF: CRLite // PREF: CRLite
@@ -57,66 +91,21 @@ user_pref("dom.battery.enabled", false);
user_pref("security.pki.crlite_mode", 2); user_pref("security.pki.crlite_mode", 2);
user_pref("security.remote_settings.crlite_filters.enabled", true); user_pref("security.remote_settings.crlite_filters.enabled", true);
/****************************************************************************** // PREF: Local Storage Next Generation (LSNG) (DOMStorage)
* SECTION: STORAGE *
******************************************************************************/
// PREF: Dynamic First-Party Isolation (dFPI)
// A more web-compatible version of FPI, which double keys all third-party state by the origin of the top-level
// context. dFPI partitions user's browsing data for each top-level eTLD+1, but is flexible enough to apply web
// compatibility heuristics to address resulting breakage by dynamically modifying a frame's storage principal.
// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1625228
// [2] https://bugzilla.mozilla.org/show_bug.cgi?id=1549587
// 5=block cross site and social media trackers, and isolate remaining cookies (Dynamic First Party Isolation)
user_pref("network.cookie.cookieBehavior", 5);
// PREF: Limit third-party cookies
// Because of dFPI and our tracking protection(s), we will only clear nonsecure cookies each session.
// user_pref("network.cookie.thirdparty.sessionOnly", false);
// user_pref("network.cookie.thirdparty.nonsecureSessionOnly", true);
// PREF: Delete all cookies after a certain period of time
// ALTERNATIVE: Use a cookie manager extension
// user_pref("network.cookie.lifetimePolicy", 3);
// user_pref("network.cookie.lifetime.days", 7);
// PREF: Redirect tracking prevention + Purge site data of sites associated with tracking cookies automatically
// All storage is cleared (more or less) daily from origins that are known trackers and that
// havent received a top-level user interaction (including scroll) within the last 45 days.
// [1] https://www.ghacks.net/2020/08/06/how-to-enable-redirect-tracking-in-firefox/
// [2] https://www.cookiestatus.com/firefox/#other-first-party-storage
// [3] https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Privacy/Redirect_tracking_protection
// [4] https://www.ghacks.net/2020/03/04/firefox-75-will-purge-site-data-if-associated-with-tracking-cookies/
// [5] https://github.com/arkenfox/user.js/issues/1089
user_pref("privacy.purge_trackers.enabled", true);
// user_pref("privacy.purge_trackers.logging.level", "All"); /* ??? */
// user_pref("privacy.purge_trackers.consider_entity_list", false); /* ??? */
// PREF: Isolate cache per site
user_pref("browser.cache.cache_isolation", true);
// PREF: Enforce no offline cache storage (appCache)
// [1] https://github.com/arkenfox/user.js/issues/1055
user_pref("browser.cache.disk.enable", true); /* default */
user_pref("browser.cache.offline.enable", true); /* default */
user_pref("browser.cache.offline.storage.enable", false);
// PREF: Network Partitioning
// Network Partitioning will allow Firefox to save resources like the cache, favicons, CSS files, images, and more
// on a per-website basis rather than together in the same pool.
// [1] https://www.zdnet.com/article/firefox-to-ship-network-partitioning-as-a-new-anti-tracking-defense/
// [2] https://github.com/privacycg/storage-partitioning
user_pref("privacy.partition.network_state", true);
// PREF: Enable Local Storage Next Generation (LSNG) (DOMStorage)
// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1286798 // [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1286798
user_pref("dom.storage.next_gen", true); user_pref("dom.storage.next_gen", true);
// PREF: enforce no offline cache storage (appCache)
// [1] https://github.com/arkenfox/user.js/issues/1055
// user_pref("browser.cache.disk.enable", true); // default
// user_pref("browser.cache.offline.enable", true); // default
// user_pref("browser.cache.offline.storage.enable", false);
/****************************************************************************** /******************************************************************************
* SECTION: CLEARING HISTORY DEFAULTS * * SECTION: CLEARING DATA DEFAULTS *
******************************************************************************/ ******************************************************************************/
// PREF: Reset default items to clear with Ctrl-Shift-Del // PREF: reset default items to clear with Ctrl-Shift-Del
// This dialog can also be accessed from the menu History>Clear Recent History // This dialog can also be accessed from the menu History>Clear Recent History
// Firefox remembers your last choices. This will reset them when you start Firefox. // Firefox remembers your last choices. This will reset them when you start Firefox.
// Regardless of what you set privacy.cpd.downloads to, as soon as the dialog // Regardless of what you set privacy.cpd.downloads to, as soon as the dialog
@@ -130,7 +119,7 @@ user_pref("privacy.cpd.cookies", false); // Cookies
user_pref("privacy.cpd.sessions", false); // Active Logins user_pref("privacy.cpd.sessions", false); // Active Logins
user_pref("privacy.cpd.siteSettings", false); // Site Preferences user_pref("privacy.cpd.siteSettings", false); // Site Preferences
// PREF: Reset default 'Time range to clear' for 'Clear Recent History'. // PREF: reset default 'Time range to clear' for 'Clear Recent History'.
// Firefox remembers your last choice. This will reset the value when you start Firefox. // Firefox remembers your last choice. This will reset the value when you start Firefox.
// 0=everything, 1=last hour, 2=last two hours, 3=last four hours, // 0=everything, 1=last hour, 2=last two hours, 3=last four hours,
// 4=today, 5=last five minutes, 6=last twenty-four hours // 4=today, 5=last five minutes, 6=last twenty-four hours
@@ -138,17 +127,26 @@ user_pref("privacy.cpd.siteSettings", false); // Site Preferences
// blank value if they are used, but they do work as advertised. // blank value if they are used, but they do work as advertised.
user_pref("privacy.sanitize.timeSpan", 0); user_pref("privacy.sanitize.timeSpan", 0);
// PREF: Set History section to show all options // PREF: set History section to show all options
user_pref("privacy.history.custom", true); user_pref("privacy.history.custom", true);
/****************************************************************************** // PREF: limit third-party cookies
* SECTION: PRELOADING/PREFETCHING * // Because of dFPI and our tracking protection(s), we will only clear nonsecure cookies each session.
******************************************************************************/ // user_pref("network.cookie.thirdparty.sessionOnly", false);
// user_pref("network.cookie.thirdparty.nonsecureSessionOnly", true);
// I have altered this section for a mixture of privacy and speed. // PREF: delete all cookies after a certain period of time
// ALTERNATIVE: Use a cookie manager extension
// user_pref("network.cookie.lifetimePolicy", 3);
// user_pref("network.cookie.lifetime.days", 7);
/******************************************************************************
* SECTION: PRELOADING *
******************************************************************************/
// [NOTE] I have altered this section for a mixture of privacy and speed.
// Leave off any PREFETCH preferences if you use an adblock extension and/or DNS-level adblocking due to wonky page rendering. // Leave off any PREFETCH preferences if you use an adblock extension and/or DNS-level adblocking due to wonky page rendering.
// All PREFETCH preferences continue to be disabled here and in the user.js, but other speed improvements are enabled. // All PREFETCH preferences continue to be disabled here and in the user.js, but other speed improvements are enabled.
// NOTE: You can set uBlock Origin to do "Disable pre-fetching" in its settings. This overrides some settings below. // You can set uBlock Origin to do "Disable pre-fetching" in its settings. This overrides some settings below.
// PREF: DNS prefetching // PREF: DNS prefetching
// [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-DNS-Prefetch-Control // [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-DNS-Prefetch-Control
@@ -201,6 +199,10 @@ user_pref("browser.newtab.preload", true); /* default */
* SECTION: SEARCH / URL BAR * * SECTION: SEARCH / URL BAR *
******************************************************************************/ ******************************************************************************/
// PREF: trim certain parts of the URL
// [1] https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/Preference_reference/browser.urlbar.trimURLs#values
user_pref("browser.urlbar.trimURLs", false);
// PREF: Enable a seperate search engine for Private Windows // PREF: Enable a seperate search engine for Private Windows
// Remember to go into Preferences -> Search and select another search provider (like DuckDuckGo) // Remember to go into Preferences -> Search and select another search provider (like DuckDuckGo)
user_pref("browser.search.separatePrivateDefault", true); user_pref("browser.search.separatePrivateDefault", true);
@@ -326,6 +328,13 @@ user_pref("signon.management.page.breachAlertUrl", "");
user_pref("browser.contentblocking.report.lockwise.enabled", false); user_pref("browser.contentblocking.report.lockwise.enabled", false);
user_pref("browser.contentblocking.report.lockwise.how_it_works.url", ""); user_pref("browser.contentblocking.report.lockwise.how_it_works.url", "");
// PREF: Disable Firefox built-in password generator
// Create passwords with random characters and numbers.
// [NOTE] Doesn't work with Lockwise disabled!
// [1] https://wiki.mozilla.org/Toolkit:Password_Manager/Password_Generation
user_pref("signon.generation.available", false);
user_pref("signon.generation.enabled", false);
// PREF: Disable password manager // PREF: Disable password manager
// NOTE” This does not clear any passwords already saved // NOTE” This does not clear any passwords already saved
user_pref("signon.rememberSignons", false); user_pref("signon.rememberSignons", false);
@@ -335,12 +344,6 @@ user_pref("signon.showAutoCompleteFooter", false);
user_pref("signon.autologin.proxy", false); user_pref("signon.autologin.proxy", false);
user_pref("signon.debug", false); user_pref("signon.debug", false);
// PREF: Disable Firefox built-in password generator
// [1] https://wiki.mozilla.org/Toolkit:Password_Manager/Password_Generation
// NOTE: Create passwords with random characters and numbers
user_pref("signon.generation.available", false);
user_pref("signon.generation.enabled", false);
// PREF: Disable Firefox import password from signons.sqlite file // PREF: Disable Firefox import password from signons.sqlite file
// [1] https://support.mozilla.org/en-US/questions/1020818 // [1] https://support.mozilla.org/en-US/questions/1020818
user_pref("signon.management.page.fileImport.enabled", false); user_pref("signon.management.page.fileImport.enabled", false);
@@ -472,14 +475,14 @@ user_pref("network.http.referer.XOriginTrimmingPolicy", 2);
* SECTION: GOOGLE SAFE BROWSING (GSB) * * SECTION: GOOGLE SAFE BROWSING (GSB) *
******************************************************************************/ ******************************************************************************/
// PREF: Disable GSB checks for downloads (remote) // PREF: GSB checks for downloads (remote)
// To verify the safety of certain executable files, Firefox may submit some information about the // To verify the safety of certain executable files, Firefox may submit some information about the
// file, including the name, origin, size and a cryptographic hash of the contents, to the Google // file, including the name, origin, size and a cryptographic hash of the contents, to the Google
// Safe Browsing service which helps Firefox determine whether or not the file should be blocked. // Safe Browsing service which helps Firefox determine whether or not the file should be blocked.
user_pref("browser.safebrowsing.downloads.remote.enabled", false); user_pref("browser.safebrowsing.downloads.remote.enabled", false);
user_pref("browser.safebrowsing.downloads.remote.url", ""); user_pref("browser.safebrowsing.downloads.remote.url", "");
// PREF: Disable GSB, master switch // PREF: GSB, master switch
// WARNING: Be sure to have alternate security measures if you disable Safe Browsing. // WARNING: Be sure to have alternate security measures if you disable Safe Browsing.
// Increased privacy away from Google, but less protection against threats. // Increased privacy away from Google, but less protection against threats.
// Privacy & Security>Security>... "Block dangerous and deceptive content" // Privacy & Security>Security>... "Block dangerous and deceptive content"
@@ -488,22 +491,22 @@ user_pref("browser.safebrowsing.downloads.remote.url", "");
user_pref("browser.safebrowsing.malware.enabled", false); user_pref("browser.safebrowsing.malware.enabled", false);
user_pref("browser.safebrowsing.phishing.enabled", false); user_pref("browser.safebrowsing.phishing.enabled", false);
// PREF: Prevent GSB from checking downloads local + remote, master switch // PREF: GSB checking downloads local + remote, master switch
// Privacy & Security>Security>... "Block dangerous downloads" // Privacy & Security>Security>... "Block dangerous downloads"
user_pref("browser.safebrowsing.downloads.enabled", false); user_pref("browser.safebrowsing.downloads.enabled", false);
// PREF: Disable GSB checks for unwanted software // PREF: GSB checks for unwanted software
// Privacy & Security>Security>... "Warn you about unwanted and uncommon software" // Privacy & Security>Security>... "Warn you about unwanted and uncommon software"
user_pref("browser.safebrowsing.downloads.remote.block_potentially_unwanted", false); user_pref("browser.safebrowsing.downloads.remote.block_potentially_unwanted", false);
user_pref("browser.safebrowsing.downloads.remote.block_uncommon", false); user_pref("browser.safebrowsing.downloads.remote.block_uncommon", false);
// PREF: Disable 'ignore this warning' on Google Safe Browsing warnings // PREF: 'ignore this warning' on Google Safe Browsing warnings
// If clicked, it bypasses the block for that session. This is a means for admins to enforce SB. // If clicked, it bypasses the block for that session. This is a means for admins to enforce SB.
// [1] https://bugzilla.mozilla.org/1226490 // [1] https://bugzilla.mozilla.org/1226490
// user_pref("browser.safebrowsing.allowOverride", false); // user_pref("browser.safebrowsing.allowOverride", false);
// user_pref("browser.safebrowsing.blockedURIs.enabled", true); // user_pref("browser.safebrowsing.blockedURIs.enabled", true);
// PREF: Obliterate every trace of GSB from your browser // PREF: obliterate every trace of GSB from your browser
// google // google
user_pref("browser.safebrowsing.provider.google.advisoryURL", ""); user_pref("browser.safebrowsing.provider.google.advisoryURL", "");
user_pref("browser.safebrowsing.provider.google.pver", ""); user_pref("browser.safebrowsing.provider.google.pver", "");
@@ -564,81 +567,85 @@ user_pref("extensions.webextensions.tabhide.enabled", false);
* SECTION: TELEMETRY * * SECTION: TELEMETRY *
******************************************************************************/ ******************************************************************************/
// PREF: Disable all the various Mozilla telemetry, studies, reports, etc. // PREF: disable all the various Mozilla telemetry, studies, reports, etc.
// Telemtry // Telemtry
pref("toolkit.telemetry.unified", false); user_pref("toolkit.telemetry.unified", false);
pref("toolkit.telemetry.enabled", false); user_pref("toolkit.telemetry.enabled", false);
pref("toolkit.telemetry.server", "data:,"); user_pref("toolkit.telemetry.server", "data:,");
pref("toolkit.telemetry.archive.enabled", false); user_pref("toolkit.telemetry.archive.enabled", false);
pref("toolkit.telemetry.newProfilePing.enabled", false); user_pref("toolkit.telemetry.newProfilePing.enabled", false);
pref("toolkit.telemetry.shutdownPingSender.enabled", false); user_pref("toolkit.telemetry.shutdownPingSender.enabled", false);
pref("toolkit.telemetry.updatePing.enabled", false); user_pref("toolkit.telemetry.updatePing.enabled", false);
pref("toolkit.telemetry.bhrPing.enabled", false); user_pref("toolkit.telemetry.bhrPing.enabled", false);
pref("toolkit.telemetry.firstShutdownPing.enabled", false); user_pref("toolkit.telemetry.firstShutdownPing.enabled", false);
// Corroborator // Corroborator
pref("corroborator.enabled", false); user_pref("corroborator.enabled", false);
// Telemetry Coverage // Telemetry Coverage
pref("toolkit.telemetry.coverage.opt-out", true); user_pref("toolkit.telemetry.coverage.opt-out", true);
pref("toolkit.coverage.opt-out", true); user_pref("toolkit.coverage.opt-out", true);
pref("toolkit.coverage.endpoint.base", ""); user_pref("toolkit.coverage.endpoint.base", "");
// Health Reports // Health Reports
// [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to send technical data. // [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to send technical data.
pref("datareporting.healthreport.uploadEnabled", false); user_pref("datareporting.healthreport.uploadEnabled", false);
// New data submission, master kill switch // New data submission, master kill switch
// If disabled, no policy is shown or upload takes place, ever // If disabled, no policy is shown or upload takes place, ever
// [1] https://bugzilla.mozilla.org/1195552 // [1] https://bugzilla.mozilla.org/1195552
pref("datareporting.policy.dataSubmissionEnabled", false); user_pref("datareporting.policy.dataSubmissionEnabled", false);
// Studies // Studies
// [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to install and run studies // [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to install and run studies
pref("app.shield.optoutstudies.enabled", false); user_pref("app.shield.optoutstudies.enabled", false);
// Personalized Extension Recommendations in about:addons and AMO // Personalized Extension Recommendations in about:addons and AMO
// [NOTE] This pref has no effect when Health Reports are disabled. // [NOTE] This pref has no effect when Health Reports are disabled.
// [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to make personalized extension recommendations // [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to make personalized extension recommendations
pref("browser.discovery.enabled", false); user_pref("browser.discovery.enabled", false);
// Crash Reports // PREF: disable crash reports
pref("breakpad.reportURL", ""); user_pref("breakpad.reportURL", "");
pref("browser.tabs.crashReporting.sendReport", false); user_pref("browser.tabs.crashReporting.sendReport", false);
pref("browser.crashReports.unsubmittedCheck.enabled", false); user_pref("browser.crashReports.unsubmittedCheck.enabled", false);
// backlogged crash reports // backlogged crash reports
pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); user_pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false);
// disable Captive Portal detection // PREF: Captive Portal detection
// [WARNING] May NOT be able to use your browser at hotels and coffee shops.
// [1] https://www.eff.org/deeplinks/2017/08/how-captive-portals-interfere-wireless-security-and-privacy // [1] https://www.eff.org/deeplinks/2017/08/how-captive-portals-interfere-wireless-security-and-privacy
// [2] https://wiki.mozilla.org/Necko/CaptivePortal // [2] https://wiki.mozilla.org/Necko/CaptivePortal
// user_pref("captivedetect.canonicalURL", ""); // user_pref("captivedetect.canonicalURL", "");
// user_pref("network.captive-portal-service.enabled", false); // user_pref("network.captive-portal-service.enabled", false);
// disable Network Connectivity checks // PREF: Network Connectivity checks
// [1] https://bugzilla.mozilla.org/1460537 // [1] https://bugzilla.mozilla.org/1460537
// user_pref("network.connectivity-service.enabled", false); // user_pref("network.connectivity-service.enabled", false);
// Software that continually reports what default browser you are using // PREF: software that continually reports what default browser you are using
pref("default-browser-agent.enabled", false); user_pref("default-browser-agent.enabled", false);
// Report extensions for abuse // PREF: "report extensions for abuse"
pref("extensions.abuseReport.enabled", false); user_pref("extensions.abuseReport.enabled", false);
// Normandy/Shield [extensions tracking] // PREF: Normandy/Shield [extensions tracking]
// Shield is an telemetry system (including Heartbeat) that can also push and test "recipes" // Shield is an telemetry system (including Heartbeat) that can also push and test "recipes"
pref("app.normandy.enabled", false); user_pref("app.normandy.enabled", false);
pref("app.normandy.api_url", ""); user_pref("app.normandy.api_url", "");
// disable PingCentre telemetry (used in several System Add-ons) // PREF: PingCentre telemetry (used in several System Add-ons)
// Currently blocked by 'datareporting.healthreport.uploadEnabled' // Currently blocked by 'datareporting.healthreport.uploadEnabled'
pref("browser.ping-centre.telemetry", false); user_pref("browser.ping-centre.telemetry", false);
// disable Activity Stream telemetry // PREF: Activity Stream telemetry
pref("browser.newtabpage.activity-stream.feeds.telemetry", false); user_pref("browser.newtabpage.activity-stream.feeds.telemetry", false);
pref("browser.newtabpage.activity-stream.telemetry", false); user_pref("browser.newtabpage.activity-stream.telemetry", false);
// backend telemetry // PREF: backend telemetry
// [WARNING] One or more of these prefs breaks causes breakage with ETP.
// I have not tested these individually, and you should be OK to not use them.
/**
user_pref("app.normandy.first_run", false); user_pref("app.normandy.first_run", false);
user_pref("app.normandy.shieldLearnMoreUrl", ""); user_pref("app.normandy.shieldLearnMoreUrl", "");
user_pref("browser.urlbar.eventTelemetry.enabled", false); user_pref("browser.urlbar.eventTelemetry.enabled", false);
@@ -656,7 +663,7 @@ user_pref("security.app_menu.recordEventTelemetry", false);
user_pref("security.certerrors.recordEventTelemetry", false); user_pref("security.certerrors.recordEventTelemetry", false);
user_pref("security.identitypopup.recordEventTelemetry", false); user_pref("security.identitypopup.recordEventTelemetry", false);
user_pref("security.protectionspopup.recordEventTelemetry", false); user_pref("security.protectionspopup.recordEventTelemetry", false);
user_pref("telemetry.origin_telemetry_test_mode.enabled", false); user_pref("telemetry.origin_telemetry_test_mode.enabled", false); // default
user_pref("toolkit.coverage.enabled", false); user_pref("toolkit.coverage.enabled", false);
user_pref("toolkit.telemetry.archive.enabled", false); user_pref("toolkit.telemetry.archive.enabled", false);
user_pref("toolkit.telemetry.cachedClientID", ""); user_pref("toolkit.telemetry.cachedClientID", "");
@@ -666,6 +673,5 @@ user_pref("toolkit.telemetry.geckoview.streaming", false);
user_pref("toolkit.telemetry.previousBuildID", ""); user_pref("toolkit.telemetry.previousBuildID", "");
user_pref("toolkit.telemetry.reportingpolicy.firstRun", false); user_pref("toolkit.telemetry.reportingpolicy.firstRun", false);
user_pref("toolkit.telemetry.server_owner", ""); user_pref("toolkit.telemetry.server_owner", "");
user_pref("toolkit.telemetry.server", "");
user_pref("toolkit.telemetry.testing.overrideProductsCheck", false); user_pref("toolkit.telemetry.testing.overrideProductsCheck", false);
user_pref("toolkit.telemetry.unified", false); ***/