Our great sponsors
-
-
personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
-
SurveyJS
Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.
-
fugu
Fugu is simple, privacy-friendly, open-source and self-hostable product analytics. 🐡 (by shafy)
-
user.js
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
-
Vanadium
Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
-
bromite
Bromite is a Chromium fork with ad blocking and privacy enhancements; take back your browser!
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
> ... and yet it's still the ONLY cross-messenger system, not everybody uses group chats, and not everybody cares about status updates or whatever.
There is Matrix. The issue is that people don't know what actions are E2EE and what is not.
> That's not what it's for, and email is not "real time communication". I have an archive of email going back 30 years. Forward secrecy is not always a win.
It was listed under the "encrypted messaging" section.
> That's an awfully strong statement to make without a threat model...
It's not, its that browsers have evolved to the point where a lot of those extensions are unessary and actually are counter to privacy, modifying your fingerprint to be unique.
> ... but you list "social networks", which are intrinsically "not private" in their very purpose, just like video sharing...
As it happens we're removing those sections for this very reason https://github.com/privacyguides/privacyguides.org/discussio...
> https://github.com/Lissy93/personal-security-checklist/blob/...
I went through a mad phase where I had loads of extensions installed in my main browser. Then all these stories came out about addon authors getting contacted by shady actors who wanted to buy the addon so they could add malicious code that siphons off personal data. Now I just have uBlock Origin and that's it! I trust it NOT to be taken over by bad actors.
Addons also have exploitable bugs in them, and also having multiple 'privacy addons' can mean some overlap in functionality where the tracking protection is redundant since it's covered by another addon. Like who really needs Privacy Badger, DuckDuckGo privacy essentials, and then uBlock running all together?
And with browsers shipping with fingerprinting mitigation, and having the option to surf strictly HTTPS sites, some addons are becoming redundant, like HTTPS Everywhere & 'useragent spoofing' addons which can actually make you stand out (privacy.resistFingerprinting:true in Firefox FTW). The trick is to blend in with a useragent, not stand out.
Looks great. I can see that my small privay-friendly product analytics tool Fugu (https://github.com/shafy/fugu) is missing, I will make a PR =P
- https://groups.google.com/a/chromium.org/g/chromium-extensio...
> Addons also have exploitable bugs in them, and also having multiple 'privacy addons' can mean some overlap in functionality where the tracking protection is redundant since it's covered by another addon. Like who really needs Privacy Badger, DuckDuckGo privacy essentials, and then uBlock running all together?
Which is why common methodology now is very conservative. If you look at the research Arkenfox has done https://github.com/arkenfox/user.js/wiki/4.1-Extensions they recommend very few extensions.
> And with browsers shipping with fingerprinting mitigation, and having the option to surf strictly HTTPS sites, some addons are becoming redundant, like HTTPS Everywhere & 'useragent spoofing' addons which can actually make you stand out (privacy.resistFingerprinting:true in Firefox FTW). The trick is to blend in with a useragent, not stand out.
RFP does more than just adjust the user agent. User agent spoofing does *not* work.
As soon as you allow javascript there are dozens of metrics that can be used to profile you.
Vanadium and Brave are only available on Android.
Vanadium doesn't really have any privacy features that people normally think of (anti-fp, adblocking etc), it's a series of security related patches https://github.com/GrapheneOS/Vanadium/tree/12.1/patches
Bromite does have some features like this https://github.com/bromite/bromite, but we've found in experience the adblocker, is not as comprehensive as uBO, particularly in harder blocking modes https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium...
That said for Android Firefox doesn't have the same process isolation like we see from chromium browsers.
I still wouldn't bother with Brave on mobile when you've got Bromite though.
Vanadium and Brave are only available on Android.
Vanadium doesn't really have any privacy features that people normally think of (anti-fp, adblocking etc), it's a series of security related patches https://github.com/GrapheneOS/Vanadium/tree/12.1/patches
Bromite does have some features like this https://github.com/bromite/bromite, but we've found in experience the adblocker, is not as comprehensive as uBO, particularly in harder blocking modes https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium...
That said for Android Firefox doesn't have the same process isolation like we see from chromium browsers.
I still wouldn't bother with Brave on mobile when you've got Bromite though.
Vanadium and Brave are only available on Android.
Vanadium doesn't really have any privacy features that people normally think of (anti-fp, adblocking etc), it's a series of security related patches https://github.com/GrapheneOS/Vanadium/tree/12.1/patches
Bromite does have some features like this https://github.com/bromite/bromite, but we've found in experience the adblocker, is not as comprehensive as uBO, particularly in harder blocking modes https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium...
That said for Android Firefox doesn't have the same process isolation like we see from chromium browsers.
I still wouldn't bother with Brave on mobile when you've got Bromite though.