diff --git a/README.md b/README.md index f567d0a..fc7caa0 100644 --- a/README.md +++ b/README.md @@ -33,17 +33,19 @@ about:config tweaks to enhance [Mozilla Firefox](https://www.mozilla.org/en-US/f **If you want a secure, blazing fast browsing experience, and don't want to deal with breakage, this setup is for you.** My objective is to make the defaults sufficient enough for the average privacy-minded user, but remain trouble-free enough that my grandmother could use it. (That puts a whole new twist on being a foxy grandma!) Edit: Sorry for the dad joke 😓 ## about:Privacy -My guiding principle was: "If it breaks it, it doesn't make it!" So things like WebGL and DRM are still enabled, and you won't find a setting like `privacy.resistFingerprinting` mentioned here. BetterFox is designed to set-and-forget, not to troubleshoot and tinker. You can compare different user.js files [here](https://yokoffing.github.io/compare-user.js/). +My guiding principle was: "If it breaks it, it doesn't make it!" So things like WebGL and DRM are still enabled, and you won't find a setting like `privacy.resistFingerprinting` mentioned here ([why?](https://old.reddit.com/r/firefox/comments/wuqpgi/are_there_any_aboutconfig_tweaks_to_get_smooth/ile3whx/?context=3)). BetterFox is designed to set-and-forget, not to troubleshoot and tinker. You can compare different user.js files [here](https://jm42.github.io/compare-user.js). -BetterFox was created with a [less is more](https://medium.com/the-mission/less-is-more-the-minimum-effective-dose-e6d56625931e) mentality (i.e., keeping in mind [the law of diminishing returns](https://www.investopedia.com/terms/l/lawofdiminishingmarginalreturn.asp)). Most repos I've encountered have niche privacy and security concerns with little regard for speed, annoyances, or mainstream use. The average user doesn't need all `user_prefs` altered to get the results they want. +BetterFox was created with a [less is more](https://medium.com/the-mission/less-is-more-the-minimum-effective-dose-e6d56625931e) mentality (i.e., keeping in mind [the law of diminishing returns](https://www.investopedia.com/terms/l/lawofdiminishingmarginalreturn.asp)). Most repos I've encountered have niche privacy and security concerns with little regard for speed, annoyances, or mainstream use. The average user doesn't need all `prefs` altered to get the results they want. ## Assumptions That being said, BetterFox does make some assumptions: -* **Google Safe Browsing** is removed. If you don't have other means of protection, you should remove the preferences listed for this section to leave it enabled. -* The native **password manager** is also disabled. If you don't use something like [KeePass](https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/), [Bitwarden](https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/), or [1Password](https://addons.mozilla.org/en-US/firefox/addon/1password-x-password-manager), then remove the prefs that disable this functionality. -* Firefox **Sync** is disabled. Enable those prefs or use a recommended addon like [xBrowserSync](https://addons.mozilla.org/en-US/firefox/addon/xbs/). -* You should have [uBlock Origin](https://github.com/yokoffing/BetterFox/wiki/uBlock-Origin), [Ghostery](https://github.com/yokoffing/BetterFox/wiki/Ghostery), or [AdGuard](https://addons.mozilla.org/en-US/firefox/addon/adguard-adblocker/) for browser-level content blocking. -* Using DNS-level protection like [NextDNS](https://nextdns.io/?from=xujj63g5) is also highly recommended. (You can check out the NextDNS Guide [here](https://github.com/yokoffing/NextDNS-Config).) +* **Google Safe Browsing** (GSB) is disabled. Please use DNS-level protection like [NextDNS](https://nextdns.io/?from=xujj63g5), and check out our configuration guide [here](https://github.com/yokoffing/NextDNS-Config). + * If you don't have other means of protection, then enable GSB locally by [adding these prefs](https://github.com/yokoffing/BetterFox/blob/b354f21405fcfedee8ae9a132eac8d243b59ced7/SecureFox.js#L974-L983) to the bottom of your `user.js`. +* The native **password manager** is also disabled. If you don't use something like [KeePass](https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/), [Bitwarden](https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/), or [1Password](https://addons.mozilla.org/en-US/firefox/addon/1password-x-password-manager), then add [these prefs](https://github.com/yokoffing/BetterFox/blob/b354f21405fcfedee8ae9a132eac8d243b59ced7/SecureFox.js#L734-L736) to re-enable native password management. +* **Firefox Sync** is disabled. Change [this pref](https://github.com/yokoffing/BetterFox/blob/b354f21405fcfedee8ae9a132eac8d243b59ced7/SecureFox.js#L989-L992) to `true` and add it to your overrides, or use a addon like [xBrowserSync](https://addons.mozilla.org/en-US/firefox/addon/xbs/). +* BetterFox [allows](https://github.com/yokoffing/BetterFox/blob/eb0b47f40d18be328b9e499163ae199e7f2ef91e/SecureFox.js#L48-L55) for **embedded tweets, instagram, and reddit posts** to load on webpages, even though these requests are blocked by default when using Firefox's **Strict** Tracking Protection. To revert this behavior, add [these prefs](https://github.com/yokoffing/BetterFox/blob/5d16f192d4c7fb36cf723f2aedf118bc62bfd115/SecureFox.js#L62-L65) to the bottom of your `user.js`. + * We suggest that you [selectively allow](https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-quick-guide) these requests in uBlock Origin with [medium mode](https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium-mode) enabled as well as add the [Privacy Essentials](https://github.com/yokoffing/filterlists/blob/main/PrivacyEssentials.txt) filter to your [custom lists](https://github.com/gorhill/uBlock/wiki/Dashboard:-Filter-lists#3rd-party-filter-lists). +* You should have [uBlock Origin](https://github.com/yokoffing/BetterFox/wiki/uBlock-Origin), [AdGuard](https://addons.mozilla.org/en-US/firefox/addon/adguard-adblocker/), or [Ghostery](https://github.com/yokoffing/BetterFox/wiki/Ghostery) for browser-level content blocking. * If your threat level calls for _anonymity_ and not just reasonable _privacy,_ please use the [TOR browser](https://www.torproject.org). :thumbsup: ## [Wiki](https://github.com/yokoffing/BetterFox/wiki) @@ -57,8 +59,7 @@ Check out our [wiki](https://github.com/yokoffing/BetterFox/wiki) for extension ## Credit * Many thanks to the [Firefox](https://www.mozilla.org/en-US/firefox/new/) team and to the people working on [Bugzilla](https://bugzilla.mozilla.org/home), fighting for the [open web](https://docs.openwebsandbox.org/learn/ows-articles/what-is-the-open-web). -* This repository benefits from the research provided by [arkenfox](https://github.com/arkenfox/user.js). Much of our work is adapted from them. While BetterFox does not use their `user.js`, we attempt to maintain parity with it. -* Otherwise, where there is similiarity to other authors, credit goes to them. +* This repository benefits from the research provided by [arkenfox](https://github.com/arkenfox/user.js). While BetterFox does not use their `user.js`, we attempt to maintain parity with it.
Free Website Counter
23 July 2022