{chromium,firefox}#uBo: add LegitimateURLShortener-AffiliateTagAllowlist

I know I am not supposed to use it as it overrides lists and instead gray/noop is better, but I really want to allow some traffic regardless of what my lists say.

etc/apt/sources.list.d/README.md

@@ -0,0 +1,5 @@
+# `/etc/apt/sources.list.d`
+
+The `.list` files are traditional, `.sources` are modern `deb822` formatted
+repository entries supported since apt `1.1` which is so old as to be
+difficult to find in 2025 considering Debian Buster (oldoldstable) is on 1.8.

etc/apt/sources.list.d/stable.sources

@@ -0,0 +1,70 @@
+Types: deb deb-src
+URIs: https://deb.debian.org/debian/
+Suites: stable
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: https://deb.debian.org/debian-debug/
+Suites: stable-debug
+Components: main  contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian/
+Suites: stable
+Components: main contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug/
+Suites: stable-debug
+Components: main  contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: https://deb.debian.org/debian-security/
+Suites: stable-security
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: https://deb.debian.org/debian-debug/
+Suites: stable-proposed-updates-debug
+Components: main  contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: http://security.debian.org/
+Suites: stable-security
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: tor+http://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security/
+Suites: stable-security
+Components: main contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug/
+Suites: stable-proposed-updates-debug
+Components: main  contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: https://deb.debian.org/debian/
+Suites: stable-updates
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian/
+Suites: stable-updates
+Components: main contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

etc/apt/sources.list.d/testing.sources

@@ -0,0 +1,70 @@
+Types: deb deb-src
+URIs: https://deb.debian.org/debian/
+Suites: testing
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: https://deb.debian.org/debian-debug/
+Suites: testing-debug
+Components: main  contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian/
+Suites: testing
+Components: main contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug/
+Suites: testing-debug
+Components: main  contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: https://deb.debian.org/debian-security/
+Suites: testing-security
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: https://deb.debian.org/debian-debug/
+Suites: testing-proposed-updates-debug
+Components: main  contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: http://security.debian.org/
+Suites: testing-security
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: tor+http://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security/
+Suites: testing-security
+Components: main contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug/
+Suites: testing-proposed-updates-debug
+Components: main  contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: https://deb.debian.org/debian/
+Suites: testing-updates
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian/
+Suites: testing-updates
+Components: main contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

etc/apt/sources.list.d/unstable.list

@@ -1 +0,0 @@
-../sources.list/unstable

etc/apt/sources.list.d/unstable.sources

@@ -0,0 +1,25 @@
+Types: deb deb-src
+URIs: https://deb.debian.org/debian/
+Suites: unstable
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: https://deb.debian.org/debian-debug/
+Suites: unstable-debug
+Components: main  contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian/
+Suites: unstable
+Components: main contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug/
+Suites: unstable-debug
+Components: main  contrib non-free non-free-firmware
+Enabled: no
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

etc/apt/sources.list/sid

@@ -1,9 +0,0 @@
-## Main repos
-deb https://deb.debian.org/debian sid main contrib non-free non-free-firmware
-deb-src https://deb.debian.org/debian sid main contrib non-free non-free-firmware
-deb https://deb.debian.org/debian-debug sid-debug main contrib non-free non-free-firmware
-
-## Main repos over Tor
-#deb tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian sid main contrib non-free non-free-firmware
-#deb-src tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian sid main contrib non-free non-free-firmware
-#deb tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug sid-debug main contrib non-free non-free-firmware

etc/apt/sources.list/stable

@@ -1,44 +0,0 @@
-## Main repos
-deb https://deb.debian.org/debian stable main contrib non-free non-free-firmware
-deb-src https://deb.debian.org/debian stable main contrib non-free non-free-firmware
-deb https://deb.debian.org/debian-debug stable-debug main contrib non-free non-free-firmware
-
-## Main repos over Tor
-#deb tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian stable main contrib non-free non-free-firmware
-#deb-src tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian stable main contrib non-free non-free-firmware
-#deb tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug stable-debug main contrib non-free non-free-firmware
-
-## Security repo CDN
-deb https://deb.debian.org/debian-security/ stable-security main contrib non-free non-free-firmware
-deb-src https://deb.debian.org/debian-security/ stable-security main contrib non-free non-free-firmware
-## https://bugs.debian.org/894081
-deb https://deb.debian.org/debian-debug stable-proposed-updates-debug main contrib non-free non-free-firmware
-
-## Security repo directly
-# To be enabled AFTER it gets https, meanwhile CDN & Tor must be enough.
-#deb http://security.debian.org/ stable-security main contrib non-free non-free-firmware
-#deb-src http://security.debian.org/ stable-security main contrib non-free non-free-firmware
-
-## Security repos over Tor
-deb tor+http://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security stable-security main contrib non-free non-free-firmware
-deb-src tor+http://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security stable-security main contrib non-free non-free-firmware
-## https://bugs.debian.org/894081
-#deb tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug stable-proposed-updates-debug main contrib non-free non-free-firmware
-
-## Updates repo
-deb https://deb.debian.org/debian stable-updates main contrib non-free non-free-firmware
-deb-src https://deb.debian.org/debian stable-updates main contrib non-free non-free-firmware
-
-## Updates repo over Tor
-#deb tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian stable-updates main contrib non-free non-free-firmware
-#deb-src tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian stable-updates main contrib non-free non-free-firmware
-
-## Backports
-deb https://deb.debian.org/debian stable-backports main contrib non-free non-free-firmware
-deb-src https://deb.debian.org/debian stable-backports main contrib non-free non-free-firmware
-deb https://deb.debian.org/debian-debug stable-backports-debug main contrib non-free non-free-firmware
-
-## Backports over Tor
-#deb tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian stable-backports main contrib non-free non-free-firmware
-#deb-src tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian stable-backports main contrib non-free non-free-firmware
-#deb tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug stable-backports-debug main contrib non-free non-free-firmware

etc/apt/sources.list/testing

@@ -1,34 +0,0 @@
-## Main repos
-deb https://deb.debian.org/debian testing main contrib non-free non-free-firmware
-deb-src https://deb.debian.org/debian testing main contrib non-free non-free-firmware
-deb https://deb.debian.org/debian-debug testing-debug main contrib non-free non-free-firmware
-
-## Main repos over Tor
-#deb tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian testing main contrib non-free non-free-firmware
-#deb-src tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian testing main contrib non-free non-free-firmware
-#deb tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug testing-debug main contrib non-free non-free-firmware
-
-## Security repo CDN
-deb https://deb.debian.org/debian-security/ testing-security main contrib non-free non-free-firmware
-deb-src https://deb.debian.org/debian-security/ testing-security main contrib non-free non-free-firmware
-## https://bugs.debian.org/894081
-deb https://deb.debian.org/debian-debug testing-proposed-updates-debug main contrib non-free non-free-firmware
-
-## Security repo directly
-# To be enabled AFTER it gets https, meanwhile CDN & Tor must be enough.
-#deb http://security.debian.org/ testing-security main contrib non-free non-free-firmware
-#deb-src http://security.debian.org/ testing-security main contrib non-free non-free-firmware
-
-## Security repos over Tor
-deb tor+http://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security testing-security main contrib non-free non-free-firmware
-deb-src tor+http://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security testing-security main contrib non-free non-free-firmware
-## https://bugs.debian.org/894081
-#deb tor+http://3lz3irtzg5i4z2sz3qca3oz3sdk3p5a3xlmz3zqwornapeofvoudajid.onion/debian-debug testing-proposed-updates-debug main contrib non-free non-free-firmware
-
-## Updates repo
-deb https://deb.debian.org/debian testing-updates main contrib non-free non-free-firmware
-deb-src https://deb.debian.org/debian testing-updates main contrib non-free non-free-firmware
-
-## Updates repo over Tor
-#deb tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian testing-updates main contrib non-free non-free-firmware
-#deb-src tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian testing-updates main contrib non-free non-free-firmware

etc/apt/sources.list/unstable

@@ -1,9 +0,0 @@
-## Main repos
-deb https://deb.debian.org/debian unstable main contrib non-free non-free-firmware
-deb-src https://deb.debian.org/debian unstable main contrib non-free non-free-firmware
-deb https://deb.debian.org/debian-debug unstable-debug main contrib non-free non-free-firmware
-
-## Main repos over Tor
-#deb tor+http://vwakviie2ienjx6t.onion/debian unstable main contrib non-free non-free-firmware
-#deb-src tor+http://vwakviie2ienjx6t.onion/debian unstable main contrib non-free non-free-firmware
-#deb tor+http://ktqxbqrhg5ai2c7f.onion/debian-debug unstable-debug main contrib non-free non-free-firmware

etc/firefox/policies/policies.json

@@ -50,13 +50,17 @@
 				},
 				"uBlock0@raymondhill.net": {
 					"advancedSettings": [
+						[
+							"filterAuthorMode",
+							"true"
+						],
 						[
 							"trustedListPrefixes",
 							"-"
 						],
 						[
 							"uiPopupConfig",
-							"+captions"
+							"+captions +logger"
 						]
 					],
 					"toAdd": {
@@ -88,6 +92,7 @@
 							"user-filters",
 							"https://raw.githubusercontent.com/Mikaela/gist/master/DNS/blocklist.txt",
 							"https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener.txt",
+							"https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener-AffiliateTagAllowlist.txt",
 							"adguard-spyware-url",
 							"https://www.eff.org/files/effdntlist.txt",
 							"ublock-annoyances",
@@ -225,13 +230,14 @@
 			"Value": true
 		},
 		"EncryptedMediaExtensions": {
-			"Enabled": true,
+			"Enabled": false,
 			"Locked": false
 		},
 		"ExtensionSettings": {
 			"@contain-facebook": {
+				"blocked_install_message": "Redundant with strict tracking protection and Privacy Badger",
 				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/facebook-container/latest.xpi",
-				"installation_mode": "force_installed"
+				"installation_mode": "blocked"
 			},
 			"@testpilot-containers": {
 				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/multi-account-containers/latest.xpi",
@@ -648,6 +654,12 @@
 				"Type": "number",
 				"Value": 5
 			},
+			"media.eme.enabled": {
+				"Comment": "Resets DRM to disabled on start.",
+				"Status": "user",
+				"Type": "boolean",
+				"Value": false
+			},
 			"network.IDN_show_punycode": {
 				"Comment": "Protection against identically looking unicode domain names",
 				"Status": "locked",

etc/opt/chromium/policies/managed/aminda-extensions.json

@@ -9,13 +9,17 @@
 			},
 			"cjpalhdlnbpafiamejdnhcphjbkeiagm": {
 				"advancedSettings": [
+					[
+						"filterAuthorMode",
+						"true"
+					],
 					[
 						"trustedListPrefixes",
 						"-"
 					],
 					[
 						"uiPopupConfig",
-						"+captions"
+						"+captions +logger"
 					]
 				],
 				"toAdd": {
@@ -47,6 +51,7 @@
 						"user-filters",
 						"https://raw.githubusercontent.com/Mikaela/gist/master/DNS/blocklist.txt",
 						"https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener.txt",
+						"https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener-AffiliateTagAllowlist.txt",
 						"adguard-spyware-url",
 						"https://www.eff.org/files/effdntlist.txt",
 						"ublock-annoyances",

local/share/applications/a-vivaldi.desktop

@@ -0,0 +1,26 @@
+[Desktop Entry]
+Version=1.0
+Name=VIVALDI
+Exec=/usr/local/bin/vivaldi %U
+StartupNotify=true
+Terminal=false
+Icon=vivaldi
+Type=Application
+Categories=Network;WebBrowser;
+MimeType=application/pdf;application/rdf+xml;application/rss+xml;application/xhtml+xml;application/xhtml_xml;application/xml;image/gif;image/jpeg;image/png;image/webp;text/html;text/xml;x-scheme-handler/ftp;x-scheme-handler/http;x-scheme-handler/https;x-scheme-handler/mailto;
+Actions=new-window;new-private-window;Guest;
+
+[Desktop Action new-window]
+Name=New Window
+Name[fi]=Uusi ikkuna
+Exec=/usr/bin/env vivaldi --new-window
+
+[Desktop Action new-private-window]
+Name=New Incognito Window
+Name[fi]=Uusi incognito-ikkuna
+Exec=/usr/bin/env vivaldi --incognito
+
+[Desktop Action Guest]
+Name=Guest session
+Name[fi]=Vierasistunto
+Exec=/usr/bin/env vivaldi --guest