mirror/ arkenfox-user.js
1
1
Fork 0
mirror of https://github.com/arkenfox/user.js.git synced 2024-05-25 05:26:13 +02:00
Code Issues Wiki
1,997 Commits 2 Branches 104 Tags 3.9 MiB
Commit Graph

1997 Commits

Author SHA1 Message Date
Thorin-Oakenpants 69132b588f
7000s: mathml, svg, #1235 2021-08-24 05:43:38 +00:00
Thorin-Oakenpants 51748ea25a
leverage cve keyword 2021-08-24 03:09:33 +00:00
Thorin-Oakenpants 269cf965bd
renumber 1700s 2021-08-23 10:03:13 +00:00
Thorin-Oakenpants b177c73f0d
typo 
technically it's "or" - FPI overrides network partitioning
 2021-08-23 09:47:34 +00:00
Thorin-Oakenpants 613e55ae8c
7000s: add MOAR; renumber 0700s, #1235 2021-08-23 09:42:21 +00:00
Thorin-Oakenpants 3697bd8d3a
1603 -> inactive 
Yes it's pretty much useless. Yes it's fingerprintable, and what that entropy is, who knows. Since it's sent regardless with ETP, which we enable in all windows, then who cares. And if you don't use ETP in all windows, then I don't care either - just saying
 2021-08-23 06:26:45 +00:00
Thorin-Oakenpants 9f08c7c0f4
7000s: referer policy #1235 
and re-number 1600s
 2021-08-23 06:04:19 +00:00
Thorin-Oakenpants 05b7d61735
7000s: non cross origin referers 2021-08-23 04:54:49 +00:00
Thorin-Oakenpants e31a6876e6
section 6000 2021-08-23 04:40:29 +00:00
Thorin-Oakenpants 47be7ba42f
1203 is a reset not enforce 2021-08-23 04:08:49 +00:00
Thorin-Oakenpants 033977fe10
move personal to last 
probably more professional to keep it at the end since it isn't strictly project related. It also opens up space for `DON'T TOUCH` and `OPTIONAL OPSEC`
 2021-08-23 03:39:15 +00:00
Thorin-Oakenpants ab42deb541
Four more items to 7000s, #1235 2021-08-23 02:55:36 +00:00
icpantsparti 8a22a90804
colon insertion (#1238) 2021-08-22 16:23:51 +00:00
Thorin-Oakenpants c55e6dcd68
flip order, order within groups 
- note: keeping 91 separate for now for the easy info factpr
 2021-08-22 08:27:15 +00:00
Thorin-Oakenpants cf379bcce0
typos 2021-08-22 05:45:08 +00:00
Thorin-Oakenpants 2b26cd4f41
7000s: ciphers, #1235 
- merged 3DES cipher to bottom: it is still the same order of [1]
- 3DES pref will be deprecated: pref name changes, and the cipher slated to be unavailable unless you downgrade to < TLS1.2 - see https://bugzilla.mozilla.org/show_bug.cgi?id=1724072
   - FYI: we reset TLS downgrades to session only by resetting the pref currently in 1203
- "Minimal/non-existent threat of downgrade attacks"
   - FYI: these old ciphers are about 1-2% of traffic (from memory) - but that's still significant breakage
   - So the only reason to do this would be to harden against downgrade attacks (and inadvertently use weak sites = breakage): but that doesn't fit most user's threat model: and is probably never going to happen for them. Not sure if I can word that much better and just as succinct
 2021-08-22 05:18:54 +00:00
Thorin-Oakenpants 8bfee5b59f
hardware acceleration 
see 04d648d55b
 2021-08-22 01:55:28 +00:00
Thorin-Oakenpants 04d648d55b
remove 2508 
- inactive in user.js since
   - v55: gfx.direct2d.disabled
   - v67: layers.acceleration.disabled
- the way to counter hardware fingerprinting is within each API that may expose it
- this may have made some sense way back in the day, when there were less options/protections, but not any more
- [are we web render yet](https://arewewebrenderyet.com/) - yes, 100% - there is no need to cripple your browser's perf
 2021-08-22 01:53:01 +00:00
Thorin-Oakenpants 7cdc76ecf9
dom.vibrator.enabled 
see aded0707a4
 2021-08-21 04:40:11 +00:00
Thorin-Oakenpants aded0707a4
misc 
- renumber 0200s, 2500s
- remove 2414: doesn't apply to desktop, and I think it has been neutered in android
 2021-08-21 04:39:08 +00:00
Thorin-Oakenpants 2a011f1053
media.media-capabilities.enabled 
see 213467d91b
 2021-08-21 03:23:17 +00:00
Thorin-Oakenpants 213467d91b
remove 2517 
- inactive since we added it in v63
- this is not how you defeat fingerprinting (unless done in an enforced set)
- for the record: not even tor browser disable this
- fingerprinting this is not cheap in gecko (for now)
- from [2]
   - decoding/encoding capabilities: "it is expected that the entropy ... isn’t going to be significant"
   - HDR detection: "... has the potential to add significant entropy .. however .. but ... thus minimizing effective entropy" - it is what it is
   - note that RFP has some mitigations in FF82+ 1461454
 2021-08-21 03:21:32 +00:00
Thorin-Oakenpants da0c291127
update to ESR91 2021-08-21 02:26:17 +00:00
Thorin-Oakenpants 27ce48f319
trim fluff 2021-08-21 02:00:43 +00:00
Thorin-Oakenpants 37ded2a519
remove redundant warning 2021-08-20 14:10:09 +00:00
Thorin-Oakenpants c9bdceb8d6
1244: fix no upgrade test 2021-08-20 13:23:59 +00:00
Thorin-Oakenpants 95136382e1
improve 1244, closes #1047 again 2021-08-20 13:18:43 +00:00
Thorin-Oakenpants 78d953bfda
remove 1032 
dead wood: marked as default false since at least v68, inactive since at least v78, and web notifications are controlled in 2300s
 2021-08-20 03:16:25 +00:00
Thorin-Oakenpants 2d3d8ae5b0
alerts.showFavicons 2021-08-20 03:12:59 +00:00
Thorin-Oakenpants cef08b63f1
4520 -> personal 2021-08-20 02:52:55 +00:00
Thorin-Oakenpants a8e95e7310
dexter would be proud #1235 
- just to be clear, this section is not supported: not interested in references or explanations or  FF version numbers or default info etc
- "do more harm than good" - ambiguous, not interested in explaining why exactly: but FYI
  - some leak
  - most break shit
  - almost all are easily fingerprinted and the combo of them would make you really stand out
- removed the duplicate `ui.prefersReducedMotion` - this should move to personal as well
- moved `ui.systemUsesDarkTheme` to personal
 2021-08-20 02:13:53 +00:00
Thorin-Oakenpants 5ab3c47b6b
7001: tweak 
F11 has nothing to do with the API or why
 2021-08-19 15:26:22 +00:00
Thorin-Oakenpants 45c52b6620
start section 7000s 2021-08-19 14:44:06 +00:00
Thorin-Oakenpants 93f6aea06a
1605: change to active enforced 2021-08-19 13:17:07 +00:00
Thorin-Oakenpants 00fa8f1b50
general.warnOnAboutConfig 
ac84da2af4
 2021-08-19 02:14:23 +00:00
Thorin-Oakenpants ac84da2af4
remove XHTML config warning 
dead weight: ESR users will already be aware of and ticked the warning box by now
 2021-08-19 02:07:03 +00:00
Thorin-Oakenpants f19d850845
tidy #1235 
8000s (was 4600s)
- move below personal, so user-relevant part is shorter
- swap out font vis with document fonts + font whitelist
   - font vis still has usability/visual purposes: it just won't really help much with fingerprinting
   - ESR78 users (who can't use font vis), sorry, but we made doc fonts inactive for a while now, and now recommend you don't use it anyway
 2021-08-19 01:46:47 +00:00
Thorin-Oakenpants 7264271063
rusty-snake improvements, #1235 2021-08-19 00:15:30 +00:00
Thorin-Oakenpants dc63a752a5
tidy 0300 + 0301 2021-08-18 13:55:41 +00:00
Thorin-Oakenpants a70c312938
goodbye battery 
- dead weight since 2017-06-13 when ESR45 reached EOL .. good riddance
- if someone does use it, it's not going to do any harm, so no need to carry it for prefsCleaner
 2021-08-18 12:46:24 +00:00
Thorin-Oakenpants 2ce269362e
dom.battery.enabled 2021-08-18 12:40:27 +00:00
Thorin-Oakenpants 29ad768a22
RFP tweak 
letterboxing is not part of RFP, it is a separate pref: bugzilla and FF version info is in 4504
 2021-08-18 09:08:36 +00:00
Thorin-Oakenpants 679648b33e
RFP info tweak 2021-08-18 09:03:16 +00:00
Thorin-Oakenpants 783786290d
tidy 
- geo -> warning
- merge container prefs
- remove redundant "see"s
- remove corresponding 4600's item number in RFP mitigations
   - it's pretty clear by the preference names in 4600
   - could be misconstrued that the 4600 pref is the same result
- RFP's language prompt only checks for en*, not en-US (so en-GB, en-CA etc do not get prompted)
   - https://searchfox.org/mozilla-central/source/toolkit/components/resistfingerprinting/RFPHelper.jsm#196
 2021-08-18 08:24:44 +00:00
Thorin-Oakenpants e7e6cfffe8
0503: tidy 2021-08-18 07:30:55 +00:00
Thorin-Oakenpants 08e9fb35fd
update some references 2021-08-18 07:16:19 +00:00
Thorin-Oakenpants fdc9376c69
tidy 
- 0105*: merge into a single block
- 1220: make values more readable with spaces, like 2701 (no need for value 2), add default, update advise (get a new AV, SHA1 is dead baby)
- 2619: remove fluff
 2021-08-18 01:50:09 +00:00
Thorin-Oakenpants 41c3c0ec26
tweak 2522: webgl 
- we already disable webgl, that's enough
- the other two prefs are not going to provide much protection if a user decides they want webgl
- "disable-fail-if-major-performance-caveat" only applies to ESR78 and will removed in the future
- one (or two) less pref(2) for users to troubleshoot/flip
 2021-08-17 03:47:33 +00:00
Thorin-Oakenpants d7208ccf34
tidy 2021-08-17 03:41:56 +00:00
Thorin-Oakenpants 77410bf86d
musical chairs part 2 
merge plugins with webrtc (camera + mic) and "media"
 2021-08-17 03:08:48 +00:00