this post was submitted on 25 Sep 2024
112 points (91.8% liked)

Cybersecurity

5883 readers
11 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 2 years ago
MODERATORS
top 10 comments
sorted by: hot top controversial new old
[–] [email protected] 23 points 3 months ago

Can confirm. Noticed that stupid fucking opt-out setting after the last update and shook my fist at the sky. Do better Firefox, ffs.

[–] [email protected] 13 points 3 months ago* (last edited 3 months ago)

Heads up yall:

By deselecting/disabling everything under Firefox Data Collection and Use it should also disable Website Advertising Preferences which is the Privacy-preserving attribution (PPA) as mentioned in the article


That and I would honestly recommend installing Librewolf as an alternative browser (it's Firefox but with privacy prioritized default settings)


Installing as a Flatpak via Flathub

sudo pacman -S flatpak
flatpak install flathub io.gitlab.librewolf-community

Installing on Arch Linux via Yay:

## Yay Install
sudo pacman -S git
git clone https://aur.archlinux.org/yay.git
cd yay/
makepkg -si

## Enter super user/or root password when prompted.

## Package installs with Yay
yay -S librewolf-bin

Please consider donating to my Liberapay if you like seeing detailed comments/posts from meπŸ€—

[–] [email protected] 6 points 3 months ago (1 children)

In About:config you can find other more troublesome privacy issues

Normandy

User studies

Crash reports (include URLs)

Shopping partners

Pocket api

[–] [email protected] 8 points 3 months ago (1 children)

Fucking Pocket. It keeps getting re-enabled. Not on every update, otherwise I'd build muscle memory to go turn it off, but at random updates infrequent enough that I don't always remember to go check it.

[–] [email protected] 7 points 3 months ago* (last edited 3 months ago)

Make a user.js file and put it in your Mozilla profile config dir.

It overrides the settings before launch, so if it was reenabled by remote setting updates, it will be kept disabled. (Do this for any setting you want to make persistent)

extensions.pocket.enabled false

  • you can also delete any api URL to be sure it doesn't call home.

Mull does this by default.

[–] bbigras 2 points 3 months ago (1 children)

Can we disable this on mobile?

[–] [email protected] 4 points 3 months ago (1 children)

Yes, but the point is that you shouldn't have to.

[–] bbigras 1 points 3 months ago (1 children)

I don't think we have about:config on mobile. I'm not sure we have this option in the mobile settings yet. The "share with Mozilla" thing was already disabled so I'm guessing it's not the new one.

[–] [email protected] 3 points 3 months ago

It's available on Firefox Nightly.

[–] [email protected] 0 points 3 months ago

Firefox ESR creates some safe distance between you and these "wonderful" new features that everybody "wants".

And plenty enough time for a user.js template to be tweaked accordingly.