Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

v115.1 #1703

Merged
merged 10 commits into from Aug 27, 2023
Merged

v115.1 #1703

Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
a0b75e4
v116
Thorin-Oakenpants Aug 14, 2023
d85bf06
undo inadvertent 2623 change
Thorin-Oakenpants Aug 16, 2023
b3b2b1c
tweak 5013 behavior
Thorin-Oakenpants Aug 16, 2023
64c65ea
tweak 5016
Thorin-Oakenpants Aug 19, 2023
486a146
remove widevine pref #1707
Thorin-Oakenpants Aug 26, 2023
97b3f4e
move DRM to optional hardening #1707
Thorin-Oakenpants Aug 26, 2023
36e0e9b
move IPv6 to optional hardening #1707
Thorin-Oakenpants Aug 26, 2023
ddb5acf
move referer.XOriginPolicy to optional hardening #1707
Thorin-Oakenpants Aug 26, 2023
5c2912f
move keyword to optional opsec #1707
Thorin-Oakenpants Aug 27, 2023
3ca80d5
point release
Thorin-Oakenpants Aug 27, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
Prev Previous commit
Next Next commit
move IPv6 to optional hardening #1707
  • Loading branch information
@Thorin-Oakenpants
Thorin-Oakenpants committed Aug 26, 2023
commit 36e0e9bf88414154bf054c145e0737d9ec3ee777
24 changes: 10 additions & 14 deletions user.js
View file
Open in desktop
Thorin-Oakenpants marked this conversation as resolved.
Show resolved Hide resolved
Expand Up @@ -42,7 +42,7 @@
0300: QUIETER FOX
0400: SAFE BROWSING
0600: BLOCK IMPLICIT OUTBOUND
0700: DNS / DoH / PROXY / SOCKS / IPv6
0700: DNS / DoH / PROXY / SOCKS
0800: LOCATION BAR / SEARCH BAR / SUGGESTIONS / HISTORY / FORMS
0900: PASSWORDS
1000: DISK AVOIDANCE
Expand Down Expand Up @@ -255,20 +255,8 @@ user_pref("browser.places.speculativeConnect.enabled", false);
* [1] https://www.bleepingcomputer.com/news/software/major-browsers-to-prevent-disabling-of-click-tracking-privacy-risk/ ***/
// user_pref("browser.send_pings", false); // [DEFAULT: false]

/*** [SECTION 0700]: DNS / DoH / PROXY / SOCKS / IPv6 ***/
/*** [SECTION 0700]: DNS / DoH / PROXY / SOCKS ***/
user_pref("_user.js.parrot", "0700 syntax error: the parrot's given up the ghost!");
/* 0701: disable IPv6
* IPv6 can be abused, especially with MAC addresses, and can leak with VPNs: assuming
* your ISP and/or router and/or website is IPv6 capable. Most sites will fall back to IPv4
* [SETUP-WEB] PR_CONNECT_RESET_ERROR: this pref *might* be the cause
* [STATS] Firefox telemetry (Feb 2023) shows ~9% of successful connections are IPv6
* [NOTE] This is an application level fallback. Disabling IPv6 is best done at an
* OS/network level, and/or configured properly in VPN setups. If you are not masking your IP,
* then this won't make much difference. If you are masking your IP, then it can only help.
* [NOTE] PHP defaults to IPv6 with "localhost". Use "php -S 127.0.0.1:PORT"
* [TEST] https://ipleak.org/
* [1] https://www.internetsociety.org/tag/ipv6-security/ (Myths 2,4,5,6) ***/
user_pref("network.dns.disableIPv6", true);
/* 0702: set the proxy server to do any DNS lookups when using SOCKS
* e.g. in Tor, this stops your local DNS server from knowing your Tor destination
* as a remote Tor node will handle the DNS request
Expand Down Expand Up @@ -983,6 +971,14 @@ user_pref("_user.js.parrot", "5500 syntax error: this is an ex-parrot!");
* [1] https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next ***/
// user_pref("media.eme.enabled", false);
// user_pref("browser.eme.ui.enabled", false);
/* 5509: disable IPv6 if using a VPN
* This is an application level fallback. Disabling IPv6 is best done at an OS/network
* level, and/or configured properly in system wide VPN setups.
* If you see PR_CONNECT_RESET_ERROR, this pref *might* be the cause
* [NOTE] PHP defaults to IPv6 with "localhost". Use "php -S 127.0.0.1:PORT"
* [TEST] https://ipleak.org/
* [1] https://www.internetsociety.org/tag/ipv6-security/ (Myths 2,4,5,6) ***/
// user_pref("network.dns.disableIPv6", true);

/*** [SECTION 6000]: DON'T TOUCH ***/
user_pref("_user.js.parrot", "6000 syntax error: the parrot's 'istory!");
Expand Down