6ece6f5e75 
							
						 
					 
					
						
						
							
							{firefox,chromium}#ubo: add lists I can imagine triggering in near future  
						
						 
						
						
						
						
					 
					
						2024-05-19 14:47:06 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							17a189396b 
							
						 
					 
					
						
						
							
							initial commit of firefox-forbidden-policies.js (autoconfig take#2)  
						
						 
						
						
						
						
					 
					
						2024-05-19 14:05:04 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							6293ce0a14 
							
						 
					 
					
						
						
							
							run prettier on json files (4)  
						
						 
						
						
						
						
					 
					
						2024-05-19 13:10:20 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							79411a0932 
							
						 
					 
					
						
						
							
							{firefox,brave}: add forgotten integrated protection excemptions  
						
						 
						
						
						
						
					 
					
						2024-05-19 11:59:50 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							162912dd82 
							
						 
					 
					
						
						
							
							{firefox,chromium}#PrivacyBadger: just trust cloudflare.com directly  
						
						 
						
						... 
						
						
						
						I remembered that the analytics domain is cloudflareinsigts.com and I use cloudflare's esni testing etc. too often 
						
						
					 
					
						2024-05-19 11:54:58 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							79a7e38d93 
							
						 
					 
					
						
						
							
							{firefox,chromium}: actually cut PrivacyBadger's list a lot  
						
						 
						
						
						
						
					 
					
						2024-05-19 11:41:20 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							1f0ac5a0e9 
							
						 
					 
					
						
						
							
							{firefox,chromium}: simplify allowlist configuration  
						
						 
						
						... 
						
						
						
						PrivacyBadger continues having stricter rules and I am trusting it to catch what I let through 
						
						
					 
					
						2024-05-19 11:38:18 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							b4e1f7fd0e 
							
						 
					 
					
						
						
							
							{firefox,chromium}: allow challenges.cloudflare.com just in case  
						
						 
						
						
						
						
					 
					
						2024-05-19 11:04:09 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							77e2e37362 
							
						 
					 
					
						
						
							
							{firefox,chromium}: add cookie lists to uBlock Origin  
						
						 
						
						... 
						
						
						
						I was staring at them too much while testing policies 
						
						
					 
					
						2024-05-19 09:53:16 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							e8a3ecff0c 
							
						 
					 
					
						
						
							
							firefox: stop offering to translate English [and Finnish] by default  
						
						 
						
						... 
						
						
						
						Otherwise it's not intelligent enough to understand that accepted language en also means en-US 
						
						
					 
					
						2024-05-19 09:27:32 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							9fff2bb17d 
							
						 
					 
					
						
						
							
							firefox: don't install Dark Reader by default  
						
						 
						
						... 
						
						
						
						I cannot deploy it, so I have to configure it anyway and this means only Bitwarden throws a welcome page at me 
						
						
					 
					
						2024-05-19 09:07:51 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							ea5db5a670 
							
						 
					 
					
						
						
							
							firefox: install Ecosia extension by default for non-{ESR,nightly}  
						
						 
						
						
						
						
					 
					
						2024-05-19 09:03:51 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							a4f3943073 
							
						 
					 
					
						
						
							
							{firefox,chromium}: add small hints of possibly being connected to Russia  
						
						 
						
						... 
						
						
						
						https://krebsonsecurity.com/2021/05/try-this-one-weird-trick-russian-hackers-hate/  
						
						
					 
					
						2024-05-19 08:32:00 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							9b348b16cc 
							
						 
					 
					
						
						
							
							{firefox,chromium}: switch from AdNauseam to uBlock Origin  
						
						 
						
						... 
						
						
						
						I love AdNauseam, but it's a tool for protests and it shows constantly, while uBlock Origin is more sysadmin-friendly deploying silently and not complaining about browser protection or PrivacyBadger etc. 
						
						
					 
					
						2024-05-19 07:37:33 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							6a9798c61b 
							
						 
					 
					
						
						
							
							firefox: restore prefetching  
						
						 
						
						... 
						
						
						
						I accidentally tried it and it's just too significant performance improvement for me to keep disabled. Additionally AdNauseam is making clicks to ads anyway and I think I am still safer than someone who has no tracking protections at all. 
						
						
					 
					
						2024-05-18 18:44:39 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							2ff416d880 
							
						 
					 
					
						
						
							
							{firefox,chromium}: also enable curben-phishing  
						
						 
						
						
						
						
					 
					
						2024-05-18 14:04:43 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							20679e705d 
							
						 
					 
					
						
						
							
							{firefox,chromium}: enable AdNauseam ublock-annoyances & adguard-mobile-app-banners  
						
						 
						
						
						
						
					 
					
						2024-05-18 13:55:18 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c68e3f66ab 
							
						 
					 
					
						
						
							
							firefox: attempt to enable http for esr  
						
						 
						
						
						
						
					 
					
						2024-05-18 10:21:44 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							5a88836d59 
							
						 
					 
					
						
						
							
							firefox: Comment/clear network.dns.native_https_query_win10  
						
						 
						
						
						
						
					 
					
						2024-05-18 09:44:25 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							5995ef8f32 
							
						 
					 
					
						
						
							
							firefox/policies.json: attempt to autoconfig, but again not allowed  
						
						 
						
						
						
						
					 
					
						2024-05-18 09:24:25 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							1290db73f5 
							
						 
					 
					
						
						
							
							firefox/policies.json: import more disallowed things from autoconfig, comment disallowed ones, clear location provider  
						
						 
						
						
						
						
					 
					
						2024-05-18 09:15:10 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							df1458af1f 
							
						 
					 
					
						
						
							
							firefox: use system DNS for ECH (and prefer IPv6 and try image.animation.mode)  
						
						 
						
						... 
						
						
						
						The last is not allowed for stability reasons apparently. 
						
						
					 
					
						2024-05-18 07:33:10 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							fb57ae0ea5 
							
						 
					 
					
						
						
							
							firefox & chromium: accidentally silence DuckDuckGo post-install  
						
						 
						
						
						
						
					 
					
						2024-05-17 14:28:33 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c92ded3ad3 
							
						 
					 
					
						
						
							
							firefox & chromium: add Ruffle.rs  
						
						 
						
						
						
						
					 
					
						2024-05-17 11:05:31 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							05a3cb6c08 
							
						 
					 
					
						
						
							
							firefox: allow private ECS  
						
						 
						
						
						
						
					 
					
						2024-05-16 19:48:39 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							38710540f2 
							
						 
					 
					
						
						
							
							firefox & chromium: add missing favicons for DDG & Brave  
						
						 
						
						
						
						
					 
					
						2024-05-16 19:12:10 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							729013c3c1 
							
						 
					 
					
						
						
							
							firefox: install user-agent-string-switcher automatically so I don't have to worry about that for Microsoft Teams  
						
						 
						
						... 
						
						
						
						TODO: proper automagic deployment 
						
						
					 
					
						2024-05-16 15:37:59 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							e6f4bd72ba 
							
						 
					 
					
						
						
							
							firefox: explicitly enable FirefoxAccounts & Screenshots  
						
						 
						
						... 
						
						
						
						I have a feeling I might sometime have a situation where I want to disable at least accounts 
						
						
					 
					
						2024-05-16 15:16:25 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							b36f37196f 
							
						 
					 
					
						
						
							
							firefox: lock DoH again since I don't want to worry about multiple places where to edit it when I inevitably do  
						
						 
						
						
						
						
					 
					
						2024-05-16 15:13:11 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							34799d0776 
							
						 
					 
					
						
						
							
							firefox & curl: default to dns0.eu, but have comment on unfiltered.adguard-dns.con available as well  
						
						 
						
						
						
						
					 
					
						2024-05-16 15:12:12 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							23803ad433 
							
						 
					 
					
						
						
							
							firefox: restore privacy.userContext  
						
						 
						
						... 
						
						
						
						Reverts: 4b7eff36b228e5a62d2d0e7d9e7fd9cf38260e63 
						
						
					 
					
						2024-05-16 15:06:04 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							5158b52da4 
							
						 
					 
					
						
						
							
							firefox: apparently HTTPS Only mode can be set here contrary to the documentation  
						
						 
						
						... 
						
						
						
						Also generic hardening(?) 
						
						
					 
					
						2024-05-16 15:03:01 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							4b7eff36b2 
							
						 
					 
					
						
						
							
							firefox: remove privacy.userContext policies for stability reasons (Firefox ESR is upset by them)  
						
						 
						
						
						
						
					 
					
						2024-05-14 15:40:37 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							8d3609f171 
							
						 
					 
					
						
						
							
							firefox: lock ecs to disabled  
						
						 
						
						
						
						
					 
					
						2024-05-14 15:01:14 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							fb6a44d264 
							
						 
					 
					
						
						
							
							firefox: on second thoughts, let the user have some control  
						
						 
						
						
						
						
					 
					
						2024-05-14 11:51:22 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							ae0e3beb9a 
							
						 
					 
					
						
						
							
							firefox: fix pdf dark mode  
						
						 
						
						
						
						
					 
					
						2024-05-14 11:49:17 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							b60bc9f1b8 
							
						 
					 
					
						
						
							
							firefox: switch to AMO version of Privacy Badger  
						
						 
						
						
						
						
					 
					
						2024-05-14 11:18:26 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							5d46d529bb 
							
						 
					 
					
						
						
							
							firefox: new tab page crashes? No problem, we can disable it.  
						
						 
						
						
						
						
					 
					
						2024-05-14 11:01:28 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c23e857c91 
							
						 
					 
					
						
						
							
							firefox: confusing user and default means I can use dark theme here  
						
						 
						
						
						
						
					 
					
						2024-05-14 10:44:14 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							7b22530eb9 
							
						 
					 
					
						
						
							
							policies.json: seems like I confused default and user  
						
						 
						
						
						
						
					 
					
						2024-05-14 10:38:39 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							303af92a6a 
							
						 
					 
					
						
						
							
							firefox/libreawoo: remove wrong warning  
						
						 
						
						
						
						
					 
					
						2024-05-14 10:17:22 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							372a032a18 
							
						 
					 
					
						
						
							
							firefox: actually trr.mode 3 may be nice for the ECH  
						
						 
						
						
						
						
					 
					
						2024-05-14 10:10:50 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							583cc6a8a3 
							
						 
					 
					
						
						
							
							firefox: please do warn if TRR isn't working  
						
						 
						
						
						
						
					 
					
						2024-05-14 10:08:19 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							7c867e1329 
							
						 
					 
					
						
						
							
							firefox: explicitly allow about:{addons,config,profiles,support}  
						
						 
						
						
						
						
					 
					
						2024-05-14 09:57:52 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							fb73f8e5d3 
							
						 
					 
					
						
						
							
							firefox: maybe be done with preferences?  
						
						 
						
						
						
						
					 
					
						2024-05-14 09:55:24 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							5cc2e5d720 
							
						 
					 
					
						
						
							
							firefox: the end of preferences additions is approaching  
						
						 
						
						
						
						
					 
					
						2024-05-14 09:43:17 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							89dd05c882 
							
						 
					 
					
						
						
							
							firefox: set user policies of hiding Mozilla ads  
						
						 
						
						
						
						
					 
					
						2024-05-14 09:38:12 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							cb5c844e1c 
							
						 
					 
					
						
						
							
							firefox: TRR IPv6 preference & reading /etc/hosts  
						
						 
						
						
						
						
					 
					
						2024-05-14 09:34:01 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							82bcaa0d80 
							
						 
					 
					
						
						
							
							firefox: disable prediction/prefetching  
						
						 
						
						... 
						
						
						
						Interestingly the policy didn't seem to touch the two preferences 
						
						
					 
					
						2024-05-14 09:25:17 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							88c391fd04 
							
						 
					 
					
						
						
							
							firefox: don't protect any domains from extensions  
						
						 
						
						... 
						
						
						
						OK, so this simultaneously hurts security as extensions could modify the page,
but it may improve privacy by blocking analytics and it can improve
accessibility for any accessibility extensions. 
						
						
					 
					
						2024-05-14 09:18:26 +03:00