oe7drt-website/content/notes/firefox/index.md

4.4 KiB

title date tags showReadingTime showWordCount showPagination showBreadcrumbs feed_exclude draft
Firefox 2025-02-20T21:30:37+0100
firefox
false false false true true true

(1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful or accepting the risk.

(2) In the search box above the list, type or paste neww and pause while the list is filtered

(3) Review/Adjust the preferences as follows:

(A) browser.link.open_newwindow - for links in Firefox tabs

This is the one that has a checkbox on the Preferences page:

3 = divert new window to a new tab (default)
2 = allow link to open a new window
1 = force new window into same tab

(B) browser.link.open_newwindow.restriction - for links in Firefox tabs

By default, if a page sets width, height, or toolbars for a popup, Firefox will let it be a separate window. To force those into a tab as well, you can change this preference to 0:

0 = apply the setting under (A) to ALL new windows (even script windows with features)
2 = apply the setting under (A) to normal windows, but NOT to script windows with features (default)
1 = override the setting under (A) and always use new windows

(C) browser.link.open_newwindow.override.external - for links in other programs

-1 = apply the setting under (A) to external links (default)
3 = open external links in a new tab in the last active window
2 = open external links in a new window <= Try this one
1 = open external links in the last active tab replacing the current page

To return to normal if things go haywire, right-click each "modified" preference and choose Reset.

Video (description) by Mental Outlaw

Maximize Your Browsers Privacy and Security with ZERO ADDONS!!! Mental Outlaw

In this video I show you how to maximize your Browsers Privacy and Security with no browser extensions by going into about:config and changing the settings for better privacy and security. The Settings I use in this video are as follows

*about:config settings start* Disable WebRTC: WebRTC can give up your real IP even when using VPN or Tor. Type in

media.peerconnection.enabled = false

Enable fingerprint resistance: With this alone we pretty much negate the need for canvas defender, or any other fingerprint blocking addon.

privacy.resistfingerprinting = true

3DES Cypher: 3DES has known security flaws

security.ssl3.rsa_des_ede3_sha = false

Require Safe Negotiation: Optimize SSL

security.ssl.require_safe_negotiation = true

Disable TLS 1.0, 1.1

security.tls.version.min = 3 enables TLS 1.3 tls.version.max = 4

Disable 0 round trip time to better secure your forward secrecy security.tls.enable_0rtt_data = false

Disable Automatic Formfill browser.formfil.enable = false

Disable disk caching browser.cache.disk.enable = false browser.cache.disk_cache_ssl = false browser.cache.memory.enable = false browser.cache.offline.enable = false browser.cache.insecure.enable = false

Disable geolocation services geo.enabled = false

Disable plugin scanning. Can improve functionality, as some sites scan for adblockers and script blockers. Should be used even on non-hardened firefox.

plugin.scan.plid.all = false

Disable ALL telemetery

browser.newtabpage.activity-stream.feeds.telemetry browser.newtabpage.activity-stream.telemetry = false browser.pingcentre.telemetry = false devtools.onboarding.telemetry-logged = false media.wmf.deblacklisting-for-telemetry-in-gpu-process = false toolkit.telemetry.archive.enabled = false toolkit.telemetry.bhrping.enabled = false toolkit.telemetry.firstshutdownping.enabled = false toolkit.telemetry.hybridcontent.enabled = false toolkit.telemetry.newprofileping.enabled = false toolkit.telemetry.unified = false toolkit.telemetry.updateping.enabled = false toolkit.telemetry.shutdownpingsender.enabled = false

Disable WebGL Allows direct access to GPU. webgl.disabled = true

Enable first-party isolation Prevents browsers from making requests outside of the primary domain of the website. Prevents supercookies. may cause websites that rely on 3rd party scripts and libraries to break, however those are generally only used for tracking so fuck em anyway.

privacy.firstparty.isolate = true

Disable TLS false start security.ssl.enable_false_start = false *about:config settings end*