0xbrm / user.js

Sane privacy conscious user.js

Firefox hardening

Sane security conscious settings

To use, place user.js in one of the following folders:

• Unix-like (hidden folder): ~/.mozilla/firefox/
• Windows: C:\Users<Username>\AppData\Roaming\Mozilla\Firefox\Profiles\yourprofile\

Notes:

• DOM storage's size has been reduced, but has not been disabled for compatibility purposes;
• webGL is turned on for my convenience;

Extensions:

• Decentraleyes
• HTTPS-Everywhere
• HTTPS Finder
• uMatrix (in default-deny mode; malware lists checked)
• uBlock by Gorhill (non-advanced mode; all lists checked in uMatrix unchecked)

======================

Chromium requires Chameleon 0.6 in order to change the HTTP_ACCEPT headers, as well as the user agent (although replacing the latter is trivial).

Flash users, disable font enumeration if possible (mms.cfg). Firefox users ought to use freshplayerplugin, a ppapi2npapi compatibility layer that allows Firefox to use Chrome's up-to-date pepperflash.

=====================

For a user.js with more emphasis on security (occasionally at the cost of functionality, like when you completely disable DOM storage, for instance), and less emphasis on blending in, check pyllyukko's user.js. To compare privacy conscious user.js files, use jm42's compare-user.js.

user.js's Issues

Still getting 21.4 bits on Panopticlick.

Hey, I used your user.js file, and I have reduced my fingerprint score by a sizable margin, however, I still can't reproduce the results you have in the README.

Within our dataset of several million visitors, only one in 2,772,332 browsers have the same fingerprint as yours.

Currently, we estimate that your browser has a fingerprint that conveys 21.4 bits of identifying information.

Down from my browser being unique from all tested.

The problem is, even with the same addons, I don't see the No Javascript tags in my results. Even with uMatrix. Which I have been using for quit a while now. I'd love to hear more things I can do to reduce my fingerprint if you have some to share. I don't know if giving you my browser/OS details would help, so I'll just omit them unless you need them.

Thanks.