2018-11-14 Firefox Setup

New laptop at the office... These settings reflect my own compromise between usability, security and privacy. I’ll try to comment my choices, though.

Add-Ons:

uMatrix requires some interaction every now and then. You’ll get the hang of it, eventually. 🙂 Essentially: when a site breaks, open it up, think about the red stuff you want to enable and do that by clicking into the top half of the squares to allow stuff; click into the bottom half to disallow stuff. Reload every now and then until you’re happy. If you want to keep these settings, click on the lock. If you want to revert it all, click on the two arrows going in a circle.

2020-02-16: I used to list “HTTPS by default” as well. Not sure I still need it, though. It’s also pretty annoying because I still visit sites that are HTTP only.

about:config

media.autoplay.default = 1

(1 means always block, 2 means you want to be prompted for every site that tries to autoplay...)

If all the text seems too small to read comfortably, use the following instead of zooming every page to 150%:

layout.css.devPixelsPerPx = 1.5

Sadly I don’t remember what else to change right now!

Bookmarks

Remember that you can import your bookmarks from an old profile via the library / bookmark manager.

Preferences

The rest of this page is about your preferences. Depending on your version of Firefox or PureBrowser or whatever you are using, the exact labels might differ.

Search

This is from the preferences in search (the looking glass icon).

Privacy & Security

This is from the preferences in privacy/security (the padlock icon).

Choose custom.

Further down:

Tags:

Comments

@sohkamyung says:

  • “If PureBrowser supports it, try Multi-account Containers too. It silos cookies and maybe other stuff too.”
  • “For cookie management, you can try the Cookie Autodelete extension. You can use it to whitelist some sites, and it autodeletes cookies from other sites once you leave them and close the tab view.”
  • “Maybe the Firefox Temporary Containers extension might be of use.”

@fitheach says:

  • “I also use the randomised User Agent feature of uMatrix.”

@BartG95 notes:

  • “NoScript is missing?” (When I tried it a long time ago, that really did break a lot of the web. Perhaps I’m better prepared for the experience, now?)

@chozron says:

  • “I also recently turned on first party isolation in Firefox.”

@silkevicious recommends:


@maiki mentions Customizing Firefox using auto config:

The AutoConfig file can be managed centrally. To do so, the location of a secondary AutoConfig file in the primary AutoConfig file:

pref(”autoadmin.global_config_url”, “http://yourdomain.com/autoconfigfile.js”);

@fitheach has a customised version of this and says: “Some settings can be quite restrictive and I’ve disabled them. Best thing is to install as is, if a site doesn’t work disable some likely settings.”

@RedLore recommends an article on Restore Privacy which gives you a list of all the about:config changes to make to increase privacy on Firefox.

@steven also recommends https://privacytools.io and says it “is a great reference for privacy in general, and it recommends add-ons and about:config tweaks. Although it’s a website, it’s also an open source project, so you can look at the bug and feature requests to see the rationale behind their recommendations.”

– Alex Schroeder 2019-03-31 08:38 UTC


A year later...

layout.css.devPixelsPerPx = 1.5

😭

– Alex Schroeder 2020-01-02 14:01 UTC


A few months later... Something is wrong with my uMatrix, but what? The icon says 2 items, but when I open the extension’s tab, I always get the “all” and “” stuff, never the actual domain names. I use Firefox 68.6.0esr (64-bit) – and uMatrix 1.3.16.

@ashwinvis tells me they gave up on uMatrix and just use Origins advanced mode instead. This sounds like a good idea and I will try it.

Disabled:

  • 3rd-party scripts
  • 3rd-party frames

Let’s see how it goes!

– Alex Schroeder 2020-03-19 10:57 UTC


Twitter and YouTube Alternatives using Redirector

I’ve started using Redirector with the following rules (you can import and export them from the add-on’s preferences):

{
    "createdBy": "Redirector v3.5.2",
    "createdAt": "2020-06-10T11:56:28.300Z",
    "redirects": [
        {
            "description": "Twitter to Nitter",
            "exampleUrl": "https://twitter.com/neiltyson/",
            "exampleResult": "https://nitter.net/neiltyson/",
            "error": null,
            "includePattern": "https://(.*\\.)?twitter.com/(.*)",
            "excludePattern": "",
            "patternDesc": "all twitter domains go to nitter",
            "redirectUrl": "https://nitter.net/$2",
            "patternType": "R",
            "processMatches": "noProcessing",
            "disabled": false,
            "appliesTo": [
                "main_frame"
            ]
        }
    ]
}

– Alex Schroeder 2020-06-10 11:57 UTC


@lemming linked me to Disable clipboard events override in Firefox:

dom.event.clipboardevents.enabled → false

Now websites can’t override any clipboard events! That is,they can not prevent you from pasting passwords, for example.

– Alex Schroeder 2020-06-26 11:29 UTC


Please make sure you contribute only your own work, or work licensed under the GNU Free Documentation License. Note: in order to facilitate peer review and fight vandalism, we will store your IP number for a number of days. See Privacy Policy for more information. See Info for text formatting rules. You can edit the comment page if you need to fix typos. You can subscribe to new comments by email without leaving a comment.

To save this page you must answer this question:

Just say HELLO