1366 Commits

Author	SHA1	Message	Date
Aminda Suomalainen	1769f3b6dc	firefox: remove deprecated navigator.platform as well	2024-05-21 18:59:51 +03:00
Aminda Suomalainen	7006c43e77	firefox: test if OpenDyslexic extension works even if fonts aren't exposed	2024-05-21 18:23:28 +03:00
Aminda Suomalainen	2a56a0183b	firefox: disable user-agent header revealing	2024-05-21 18:21:32 +03:00
Aminda Suomalainen	129a2a04a0	firefox: restore OpenDyslexic since it works with standard contentblocking	2024-05-21 18:07:40 +03:00
Aminda Suomalainen	ef2232bb2b	firefox: give fingerprintingprotection another chance	2024-05-21 17:42:56 +03:00
Aminda Suomalainen	3d299f96f5	firefox: tone down the radicalism a bit ... This reverts commit 7421820cf6.	2024-05-21 17:12:06 +03:00
Aminda Suomalainen	7421820cf6	firefox: radicalize and trust only AdNauseam since all protection seems to conflict with accessibility or something else I care about	2024-05-21 16:52:00 +03:00
Aminda Suomalainen	3f668d68a0	firefox: another prefetch variable	2024-05-21 11:10:12 +03:00
Aminda Suomalainen	f7a484ca03	{firefox,chromium}: use GET requests with DoH for caching and speed	2024-05-21 11:07:09 +03:00
Aminda Suomalainen	a2640115c9	firefox: attempt to mitigate CVE-2024-4367 + hardening ... https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js/	2024-05-21 06:35:32 +03:00
Aminda Suomalainen	ae471c224b	aminda-duperemove.service: fix path to the binary	2024-05-20 21:15:23 +03:00
Aminda Suomalainen	1af8de8186	systemd/aminda-duperemove.service: add /usr/local/bin ... It's mostly filled with my scripts repo and has duplicates since the symlinks turn into duplicate files instead of staying as symlinks. Not that I expect it to affect much.	2024-05-20 21:11:32 +03:00
Aminda Suomalainen	a00bd7ae42	firefox: clear app.update.download.attempts	2024-05-20 19:48:12 +03:00
Aminda Suomalainen	73ff0cbcf0	{firefox,chromium}: ask for download directory to make drive-by attempts more obvious	2024-05-20 19:42:19 +03:00
Aminda Suomalainen	f0a7657d47	chromium: rm disable-incognito.json.badidea ... I just tried disabling it and then searching for the difference between it and guest mode and it was so full of ads without even the option to allow my usual extensions	2024-05-20 19:35:20 +03:00
Aminda Suomalainen	0597b4f359	{firefox,chromium}: add PrivacyGuides recommended LegitimateURLShortener.txt	2024-05-20 18:22:29 +03:00
Aminda Suomalainen	e2188d25f8	{firefox,chromium}: further cut/adjust default allowlists	2024-05-20 18:20:23 +03:00
Aminda Suomalainen	9a78f6c387	{firefox,chromium}#uBlockOrigin: add uBlock Quick Fixes just in case	2024-05-20 13:30:50 +03:00
Aminda Suomalainen	9a639609cd	{firefox,chromium}#uBlockOrigin: cut filter lists that no one has asked for yet	2024-05-20 13:21:49 +03:00
Aminda Suomalainen	5840a1a8c9	{firefox,chromium}: reset accept_languages to Firefox default	2024-05-20 13:11:23 +03:00
Aminda Suomalainen	889da57c3d	more microsoft login domains + I am not touching browser ETP without a good reason.	2024-05-19 21:12:14 +03:00
Aminda Suomalainen	6d87da0227	Does Microsoft seriously require en-GB?	2024-05-19 20:57:24 +03:00
Aminda Suomalainen	81d1a2a0fb	privacy.userContext.extension is extra forbidden!	2024-05-19 20:32:14 +03:00
Aminda Suomalainen	e066a99481	Does Mozilla have a point in not allowing me to customize fonts through policy? No comment.	2024-05-19 20:19:35 +03:00
Aminda Suomalainen	fc8efef261	pre-commit: return & run pretty-format-json as I like its sorting	2024-05-19 19:49:46 +03:00
Aminda Suomalainen	1585a6daae	firefox: or maybe I don't trust my family that much	2024-05-19 19:46:13 +03:00
Aminda Suomalainen	8b050a2bab	firefox: force enable phishing & malware protection ... Although they can still be disabled through about:config, I am trusting my family to not start doing that	2024-05-19 19:31:14 +03:00
Aminda Suomalainen	428f60d00e	chromium: recommend restoring previous session at startup ... This is painful in testing otherwise	2024-05-19 19:02:48 +03:00
Aminda Suomalainen	ee83db4ddc	firefox: comment fingerprinting protections for now	2024-05-19 19:01:38 +03:00
Aminda Suomalainen	294bcb4049	policies.json: comment what is unclear and I understand, clear what I don't understand	2024-05-19 18:40:16 +03:00
Aminda Suomalainen	3ec414c933	firefox: disable extension recommendations & default sending crashreports	2024-05-19 18:28:15 +03:00
Aminda Suomalainen	c8e85859c3	{firefox,chromium}: accept regional languages as well to not fallback to Russian?	2024-05-19 18:22:21 +03:00
Aminda Suomalainen	0e5b94c867	firefox: allow disabling peertube-companion, remove forgotten blocked_message & opendyslexic	2024-05-19 18:05:07 +03:00
Aminda Suomalainen	6c3382683b	firefox: install facebook container	2024-05-19 18:02:54 +03:00
Aminda Suomalainen	4d11897918	{firefox,chromium}#ubo: add antipaywall.txt which apparently helps with Quora login prompt as well	2024-05-19 15:04:52 +03:00
Aminda Suomalainen	6ece6f5e75	{firefox,chromium}#ubo: add lists I can imagine triggering in near future	2024-05-19 14:47:06 +03:00
Aminda Suomalainen	17a189396b	initial commit of firefox-forbidden-policies.js (autoconfig take#2)	2024-05-19 14:05:04 +03:00
Aminda Suomalainen	6293ce0a14	run prettier on json files (4)	2024-05-19 13:10:20 +03:00
Aminda Suomalainen	79411a0932	{firefox,brave}: add forgotten integrated protection excemptions	2024-05-19 11:59:50 +03:00
Aminda Suomalainen	162912dd82	{firefox,chromium}#PrivacyBadger: just trust cloudflare.com directly ... I remembered that the analytics domain is cloudflareinsigts.com and I use cloudflare's esni testing etc. too often	2024-05-19 11:54:58 +03:00
Aminda Suomalainen	79a7e38d93	{firefox,chromium}: actually cut PrivacyBadger's list a lot	2024-05-19 11:41:20 +03:00
Aminda Suomalainen	1f0ac5a0e9	{firefox,chromium}: simplify allowlist configuration ... PrivacyBadger continues having stricter rules and I am trusting it to catch what I let through	2024-05-19 11:38:18 +03:00
Aminda Suomalainen	b4e1f7fd0e	{firefox,chromium}: allow challenges.cloudflare.com just in case	2024-05-19 11:04:09 +03:00
Aminda Suomalainen	77e2e37362	{firefox,chromium}: add cookie lists to uBlock Origin ... I was staring at them too much while testing policies	2024-05-19 09:53:16 +03:00
Aminda Suomalainen	e8a3ecff0c	firefox: stop offering to translate English [and Finnish] by default ... Otherwise it's not intelligent enough to understand that accepted language en also means en-US	2024-05-19 09:27:32 +03:00
Aminda Suomalainen	9fff2bb17d	firefox: don't install Dark Reader by default ... I cannot deploy it, so I have to configure it anyway and this means only Bitwarden throws a welcome page at me	2024-05-19 09:07:51 +03:00
Aminda Suomalainen	ea5db5a670	firefox: install Ecosia extension by default for non-{ESR,nightly}	2024-05-19 09:03:51 +03:00
Aminda Suomalainen	a4f3943073	{firefox,chromium}: add small hints of possibly being connected to Russia ... https://krebsonsecurity.com/2021/05/try-this-one-weird-trick-russian-hackers-hate/	2024-05-19 08:32:00 +03:00
Aminda Suomalainen	9b348b16cc	{firefox,chromium}: switch from AdNauseam to uBlock Origin ... I love AdNauseam, but it's a tool for protests and it shows constantly, while uBlock Origin is more sysadmin-friendly deploying silently and not complaining about browser protection or PrivacyBadger etc.	2024-05-19 07:37:33 +03:00
Aminda Suomalainen	b4a1da8423	chromium: move manifestv2 from disable-floc to aminda-extensions	2024-05-19 06:45:40 +03:00
Aminda Suomalainen	6a9798c61b	firefox: restore prefetching ... I accidentally tried it and it's just too significant performance improvement for me to keep disabled. Additionally AdNauseam is making clicks to ads anyway and I think I am still safer than someone who has no tracking protections at all.	2024-05-18 18:44:39 +03:00
Aminda Suomalainen	2351d43020	chromium: enable prefetching and profilemanager	2024-05-18 18:24:45 +03:00
Aminda Suomalainen	bf85d162d1	chromium policy & documentation: cleanup	2024-05-18 18:22:54 +03:00
Aminda Suomalainen	95671fb32d	chromium: doh-private-ecs.json was supposed to be automatic	2024-05-18 16:55:38 +03:00
Aminda Suomalainen	0a4179df0c	Revert "chromium/recommended/{duckduckgo,ecosia}.json: trick Brave & Edge into complying by NewTabPageLocation" ... This reverts commit 7bab72fb3c.	2024-05-18 16:36:46 +03:00
Aminda Suomalainen	c2e0917c3a	unbound/dns-over-tls.conf: remove Quad9 ECS comments	2024-05-18 16:14:57 +03:00
Aminda Suomalainen	bec86d1344	{systemd-resolved,unbound}: add commented unfiltered adguard to appropiate file	2024-05-18 16:12:58 +03:00
Aminda Suomalainen	a7ef548dab	{chromium,unbound}: experimental dot-private-ecs.conf	2024-05-18 16:08:17 +03:00
Aminda Suomalainen	e6696d22f6	Revert "unbound/dns-over-tls.conf: remove ECS and private ECS" ... This reverts commit 78fa2b7b9c.	2024-05-18 15:51:13 +03:00
Aminda Suomalainen	5b4f78f5f4	chromium/doh-google{,64}.json: use get requests ... more as a note that it can be done	2024-05-18 15:35:36 +03:00
Aminda Suomalainen	2ff416d880	{firefox,chromium}: also enable curben-phishing	2024-05-18 14:04:43 +03:00
Aminda Suomalainen	20679e705d	{firefox,chromium}: enable AdNauseam ublock-annoyances & adguard-mobile-app-banners	2024-05-18 13:55:18 +03:00
Aminda Suomalainen	c68e3f66ab	firefox: attempt to enable http for esr	2024-05-18 10:21:44 +03:00
Aminda Suomalainen	5a88836d59	firefox: Comment/clear network.dns.native_https_query_win10	2024-05-18 09:44:25 +03:00
Aminda Suomalainen	5995ef8f32	firefox/policies.json: attempt to autoconfig, but again not allowed	2024-05-18 09:24:25 +03:00
Aminda Suomalainen	1290db73f5	firefox/policies.json: import more disallowed things from autoconfig, comment disallowed ones, clear location provider	2024-05-18 09:15:10 +03:00
Aminda Suomalainen	c05eedbb78	chromium README: note Bitwarden management options for self-hosters	2024-05-18 08:03:29 +03:00
Aminda Suomalainen	df1458af1f	firefox: use system DNS for ECH (and prefer IPv6 and try image.animation.mode) ... The last is not allowed for stability reasons apparently.	2024-05-18 07:33:10 +03:00
Aminda Suomalainen	38c331494c	chromium/managed: merge enable-ech-ocsp.json into https-everywhere.json ... This will not appear on my blog post. ECH is enough offtopic and OCSP would only bring argument on whether it's useful and is that usefulness more important than privacy leakage to non-ocsp-stapling websites.	2024-05-17 16:15:34 +03:00
Aminda Suomalainen	fb57ae0ea5	firefox & chromium: accidentally silence DuckDuckGo post-install	2024-05-17 14:28:33 +03:00
Aminda Suomalainen	c92ded3ad3	firefox & chromium: add Ruffle.rs	2024-05-17 11:05:31 +03:00
Aminda Suomalainen	9f8eaab73d	init-browser-policies.bash: why am I creating managed & recommended separately? Let's not	2024-05-17 08:31:13 +03:00
Aminda Suomalainen	344caa700d	Init-browser-policies.bash: how about not making recursive symlinks in the first place? ... Properly resolves: 0ce24f54d9	2024-05-16 21:04:01 +03:00
Aminda Suomalainen	05a3cb6c08	firefox: allow private ECS	2024-05-16 19:48:39 +03:00
Aminda Suomalainen	38710540f2	firefox & chromium: add missing favicons for DDG & Brave	2024-05-16 19:12:10 +03:00
Aminda Suomalainen	6a916ed3b9	chromium/recommended/{duckduckgo,ecosia}.json: also restore forgotten HomepageIsNewTabPage	2024-05-16 18:51:51 +03:00
Aminda Suomalainen	7bab72fb3c	chromium/recommended/{duckduckgo,ecosia}.json: trick Brave & Edge into complying by NewTabPageLocation	2024-05-16 18:47:22 +03:00
Aminda Suomalainen	006ed65597	Re-integrate Edge policies into Chromium by removing apps-as-homepage.json	2024-05-16 18:35:48 +03:00
Aminda Suomalainen	859f2a9f1d	chromium/duckduckgo.json: fill in DefaultSearchProviderNewTabURL	2024-05-16 18:29:54 +03:00
Aminda Suomalainen	729013c3c1	firefox: install user-agent-string-switcher automatically so I don't have to worry about that for Microsoft Teams ... TODO: proper automagic deployment	2024-05-16 15:37:59 +03:00
Aminda Suomalainen	e6f4bd72ba	firefox: explicitly enable FirefoxAccounts & Screenshots ... I have a feeling I might sometime have a situation where I want to disable at least accounts	2024-05-16 15:16:25 +03:00
Aminda Suomalainen	b36f37196f	firefox: lock DoH again since I don't want to worry about multiple places where to edit it when I inevitably do	2024-05-16 15:13:11 +03:00
Aminda Suomalainen	34799d0776	firefox & curl: default to dns0.eu, but have comment on unfiltered.adguard-dns.con available as well	2024-05-16 15:12:12 +03:00
Aminda Suomalainen	23803ad433	firefox: restore privacy.userContext ... Reverts: 4b7eff36b2	2024-05-16 15:06:04 +03:00
Aminda Suomalainen	5158b52da4	firefox: apparently HTTPS Only mode can be set here contrary to the documentation ... Also generic hardening(?)	2024-05-16 15:03:01 +03:00
Aminda Suomalainen	83d53b8c17	systemd-resolved/10-dot-cloudflare.conf: add malicious domain filtering and alternative SNI	2024-05-15 20:38:49 +03:00
Aminda Suomalainen	ef7584566f	systemd/resolved/10-dot-{443,adguard,dns0}.conf: fix server order	2024-05-15 20:33:23 +03:00
Aminda Suomalainen	7f918cc797	systemd/resolved.conf.d/README: note my scripts existing	2024-05-15 20:29:59 +03:00
Aminda Suomalainen	cb3c944d47	systemd-resolved: note server priority	2024-05-15 20:23:27 +03:00
Aminda Suomalainen	1f5815b54e	hosts/dns: comment the IPv4-as-IPv6 hack, uncomment proper IPv6	2024-05-15 17:44:50 +03:00
Aminda Suomalainen	4b7eff36b2	firefox: remove privacy.userContext policies for stability reasons (Firefox ESR is upset by them)	2024-05-14 15:40:37 +03:00
Aminda Suomalainen	8d34384c78	unbound: mark dot-flushable-cache.conf as .badidea	2024-05-14 15:08:26 +03:00
Aminda Suomalainen	901c634424	unbound: I have been using Fedora for a couple of years, I know where the ca bundle is without attributing to ctrl.blog	2024-05-14 15:07:11 +03:00
Aminda Suomalainen	78fa2b7b9c	unbound/dns-over-tls.conf: remove ECS and private ECS	2024-05-14 15:01:41 +03:00
Aminda Suomalainen	8d3609f171	firefox: lock ecs to disabled	2024-05-14 15:01:14 +03:00
Aminda Suomalainen	5672e14c89	Revert "Stop pretending issues of ECS weight more than pros of it after GApple upgrades delayed my going to bed." ... This reverts commit afe50117fe.	2024-05-14 14:47:09 +03:00
Aminda Suomalainen	c1b1eaa040	unbound/dot-dns0-quad9.conf: add forgotten ports	2024-05-14 12:23:09 +03:00
Aminda Suomalainen	fb6a44d264	firefox: on second thoughts, let the user have some control	2024-05-14 11:51:22 +03:00
Aminda Suomalainen	ae0e3beb9a	firefox: fix pdf dark mode	2024-05-14 11:49:17 +03:00
Aminda Suomalainen	0a9767bf38	etc/samba/playstation2.conf: hide the share from sight	2024-05-14 11:32:46 +03:00