LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 03-14-2020, 08:16 PM   #16
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,317
Blog Entries: 28

Rep: Reputation: 6140Reputation: 6140Reputation: 6140Reputation: 6140Reputation: 6140Reputation: 6140Reputation: 6140Reputation: 6140Reputation: 6140Reputation: 6140Reputation: 6140

I use privacy badger, NoScript, and a hosts file; I update the hosts file periodically using this resource, which I have used since my WinXP days.

I do not use an ad blocker.

In using NoScript, one of my considerations is, "Do I trust this site?" (For example, I trust LQ.) If I do, I will select the "temporarily trust all" option. I also try not to visit sites that I suspect of being untrustworthy.

If I must visit a known untrustworthy site--I occasionally have to log on to the Zuckerborg, for example--I do so only in a private browser window.

Just my two cents.

Last edited by frankbell; 03-14-2020 at 08:20 PM.
 
Old 03-15-2020, 12:24 AM   #17
hifi100
Member
 
Registered: Sep 2016
Location: India
Distribution: Arch Linux
Posts: 357

Original Poster
Rep: Reputation: Disabled
@ondoho

After adding uMatrix sites like Quora is not working.
 
Old 03-15-2020, 04:35 AM   #18
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by hifi100 View Post
After adding uMatrix sites like Quora is not working.
Quote:
Originally Posted by ondoho View Post
But essentially yes, you have to selectively & sparingly enable just enough javascript to get a usable web page. You only need to do this once - noscript will remember it for subsequent visits. It doesn't take long and you have your old UX back, because most of us browse only a few sites.

It's the old moral about security and convenience being on opposing ends of a scale. You have to adjust that scale the way you want it.

uMatrix works the same way but is much more powerful than noscript:
...
 
Old 03-15-2020, 07:11 AM   #19
hifi100
Member
 
Registered: Sep 2016
Location: India
Distribution: Arch Linux
Posts: 357

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by ondoho View Post
I'm only vaguely familiar with these addons, but there seems to be a lot of overlap in functionality.
And be aware that Addons also have a tendency to phone home, sometimes even the ones that use the privacy buzzword.
To get an idea about which addons I should use for privacy I visited

https://www.privacyend.com/firefox-privacy-add-ons/

Do you see any overlap now ? (Please see attachment)
Attached Thumbnails
Click image for larger version

Name:	addons2.png
Views:	17
Size:	45.0 KB
ID:	32787  
 
Old 03-15-2020, 08:46 AM   #20
redneonglow
Member
 
Registered: Feb 2020
Location: PA
Distribution: Gentoo, Slackware
Posts: 75

Rep: Reputation: 24
Firefox with:

* uBlock Origin
* Smart Referer
* privacy.resistFingerprinting=true
* Clear cookies and offline site data on browser shutdown
* The new "Container" addons

Last edited by redneonglow; 03-15-2020 at 08:47 AM. Reason: site data
 
Old 03-15-2020, 12:50 PM   #21
sevendogsbsd
Senior Member
 
Registered: Sep 2017
Distribution: FreeBSD
Posts: 2,252

Rep: Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011
PFblockerNG and DNSBL on my PFSense firewall, plus using 2 different browsers: one for logins and one for searching, research, unauthenticated browsing, etc. I don't like browser addons at all; I know they can be open source, but as others have mentioned, they have the capability to read all traffic in and out of your browser. I risk balance by taking as many other precautions as I deem necessary and the risk of an addon reading data is too much of a risk for me.

As others have mentioned, it is virtually impossible to prevent tracking so just do your best and take as many precautions as you think you need to. I am not living under a rock with a tinfoil hat on so I am going to do whatever I need to online and live with the protections I put in place.
 
Old 03-17-2020, 01:35 AM   #22
JenniferColby
LQ Newbie
 
Registered: Mar 2020
Posts: 1

Rep: Reputation: 0
Can this matter be resolved?
 
Old 03-17-2020, 02:08 AM   #23
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by JenniferColby View Post
Can this matter be resolved?
Bot.
 
Old 03-17-2020, 03:45 PM   #24
jefro
Moderator
 
Registered: Mar 2008
Posts: 21,976

Rep: Reputation: 3623Reputation: 3623Reputation: 3623Reputation: 3623Reputation: 3623Reputation: 3623Reputation: 3623Reputation: 3623Reputation: 3623Reputation: 3623Reputation: 3623
Is it a bot reply? I'm not sure.
 
Old 03-17-2020, 04:16 PM   #25
uteck
Senior Member
 
Registered: Oct 2003
Location: Elgin,IL,USA
Distribution: Ubuntu based stuff for the most part
Posts: 1,173

Rep: Reputation: 501Reputation: 501Reputation: 501Reputation: 501Reputation: 501Reputation: 501
Quote:
Originally Posted by jefro View Post
Is it a bot reply? I'm not sure.
Read the other post from the bot, it was recommending Windows anti-virus software.
 
Old 03-17-2020, 04:30 PM   #26
rnturn
Senior Member
 
Registered: Jan 2003
Location: Illinois (SW Chicago 'burbs)
Distribution: openSUSE, Raspbian, Slackware. Previous: MacOS, Red Hat, Coherent, Consensys SVR4.2, Tru64, Solaris
Posts: 2,800

Rep: Reputation: 550Reputation: 550Reputation: 550Reputation: 550Reputation: 550Reputation: 550
Quote:
Originally Posted by hifi100 View Post
I am using Firefox 74.0 (64-bit).

ADD-ons

Disconnect
Privacy Badger
Ublock Origin

Is this enough ?

I don't use Facebook or Google/Gmail. I use ProtonMail.

I use DuckDuckGo for searching.

What measures do you take to stop being tracked online ?
I use some plugins mainly for performance reasons (Adblock, Noscript). I started using the "Facebook Container" plugin for Firefox to cut down on (hopefully totally eliminate) the tracking that Facebook can do just because of the ubiquitous "f" icon that appears on virtually every web page you visit.

Cheers...
 
Old 04-23-2020, 08:37 AM   #27
jem777
LQ Newbie
 
Registered: Apr 2020
Distribution: Ubuntu, Debian, Devuan, Raspbian, Armbian, Parrot OS
Posts: 11

Rep: Reputation: Disabled
I second the use of Pi-Hole. Not only does it block ads and trackers for your entire network, it works for more than just your browser connections. These days, anything coming out of Microsoft (and various other tech companies one might add) is chockful with telemetry (e.g. Windows 10, Mircosoft Office, Visual Studio). Unlike a browser plugin, Pi-Hole can block those too.

As an added bonus, it gives you great insight in the traffic leaving your house. When I first started using it, I discovered that my PDF reader of choice was constantly "phoning home". After I became aware of it that, I found that I could disable it in the settings. I also found an app on my wife's phone that had 8.8.8.8 hardcoded into it for DNS (because that app broke when I disallowed Google and Cloudflare DNS on my firewall after I had build my Pi-Hole).

Other than that, I'm a longtime user of Noscript. I don't use Google, Twitter, Instagram, Facebook, etc.

Building a Pi-Hole is pretty easy. For extra security, I run Unbound with DNSSEC enabled as a resolver on the same little box.

https://pi-hole.net/ (I'm not affiliated with them, just a happy user).
 
Old 04-23-2020, 08:42 AM   #28
sevendogsbsd
Senior Member
 
Registered: Sep 2017
Distribution: FreeBSD
Posts: 2,252

Rep: Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011
Zero browser add-ins because I don't trust any of them. All browser extensions can read all of the traffic sent through the browser. I have DNS black hole (pfblockerng, DNSBL) set up on my firewall. I never log into any search engine (google) and use separate browsers for searching than I do for web app logins. I never post anything online using my true identity, ever. All forum or online accounts are burner accounts except for banking, bills, etc.

No social media period.

Best I can do without completely disconnecting which I will not do.
 
1 members found this post helpful.
Old 07-02-2020, 12:25 AM   #29
fotoguy
Senior Member
 
Registered: Mar 2003
Location: Brisbane Queensland Australia
Distribution: Custom Debian Live ISO's
Posts: 1,291

Rep: Reputation: 62
Firefox has a lot of settings you can change to tighten it right down, there is a file called user.js, do a DuckDuckGo search for "Secure firefox configuration", there are a few people who have their own version, there is one here you can check out https://github.com/pyllyukko/user.js/.

Using will break a lot of sites, but it tries to harden firefox to stop a lot tracking.
 
Old 07-02-2020, 03:15 AM   #30
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by john0009 View Post
i am also looking for it.
Spam!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
how can I delete temp internet files using terminal? what else can I do to keep from being tracked? TeamMikeyH Linux - Newbie 18 04-19-2018 03:23 PM
Harddisk failing - What measures to take goranbr Linux - Hardware 11 08-01-2014 09:55 AM
Basic security measures to take connecting a Linux server to the Internet. linux_linux Linux - Networking 2 03-15-2008 09:42 PM
running a home server , what security measures should i take firedancer Linux - Security 20 10-30-2007 09:02 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:53 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration