Feeling safe

>Linux >Firefox ESR >uBlock Origin >Startpage i know its not much for online secuirty nowadays but it makes me feel better im still learning about computer stuff

youre probably trolling but none of those are particularly secure, what is the point of this post

>>27081 well im very ignorant to these matters, if you have any tips i would like to hear

>>27083 Sure. Using FOSS software is nice but that automatically mean it's secure. >linux The linux kernel is notorious for needing a lot of hardening, and most distros don't do anywhere near enough. I'd recommend https://secureblue.dev/, even if you don't want to switch distros reading through the site is educational. >Firefox ESR Stick to the latest version or ideally use something Chromium based, as they are a lot more serious about browser hardening. "Maintenance of each ESR through point releases is limited to high-risk/high-impact security vulnerabilities, and in rare cases may also include off-schedule releases that address live security vulnerabilities. Backports of any functional enhancements and/or stability fixes are not in scope." https://support.mozilla.org/en-US/kb/firefox-esr-release-cycle >uBlock Origin Avoid any unnecessary browser extensions, especially manifest v3 ones. For example, try uBO lite instead and see if it works well enough for your needs. Lastly keep in mind that your usage habits has a huge impact on how safe you actually are. Even on a very insecure system a cautious and informed user with good digital hygiene will be much better off than someone installing random browser userscripts, AUR packages, or pirated software willy nilly Hope this helps

>>27085 correction: but that *doesn't automatically mean it's secure

>>27085 what about firefox hardening, i dont wanna use chromium

>>27088 Tor/Mullvad browser, or if you really know what you're doing then maybe the arkenfox user.js. Otherwise stick to the latest firefox release and tweak the user facing settings for stricter policy or disabling mozilla telemetry

>>27085 i dont use pirated programs, i just use torrent to get movies and shows

Firefox Containers best feature ever. I have separate containers and corresponding tab groups for tor, i2p and clearnet. They use special proxy settings to route everything inside certain container through corresponding ports. All normal tabs by default are routed through VPN. There is zero chance for container to make any requests bypassing its proxy config, so i2p/tor tabs will never make requests outside of i2p/tor connections. Clearnet container is routing through tinyproxy bypassing VPN with some iptables rules. Those containers paired with vertical tabs and tab groups are seriously my favourite discovery of the year.

>>27090 i can steal your nudes through a .rar download this file here to find out how! https://r.mtdv.me/download4158

>>27091 I really hope you're doing that to reduce stigma around Tor usage and not for any actual anonymity because that would be beyond fuarrrkin stupid

>>27093 It's slightly weaker than Tor Browser, but it's like 80% there. Containers also isolate cookies and all kinds of storage. For example, I have a separate container for logged in google account and few other services that SSO via google. TB is better for fingerprints I guess, but I also think it's an overrated issue, and especially nowadays when browsers by default randomize fingerprints of canvas and some other stuff making you receive unique fingerprint on every visit which is the same as not having fingerprint at all. And most other stuff like list of addons / user agent / etc, are gonna match with a lot of other people if you like me trying to use minimal addons (I only have two). You have any other issues in mind?

>>27092 but movies dont come in .rar files, they come in mkv files

The first thing you should know about learning computer privacy/security is that threads like this attract morons who will give you all kinds of bad advice, either out of stupidity or malevolent intentions. Tha only message with good advice so far was 27093.

>>27107 you are glowing glowing

>>27107 The advice I gave in >>27089 and >>27085 is in line with what you'd get from a reputable security project like GrapheneOS https://grapheneos.org/usage#web-browsing https://discuss.grapheneos.org/d/12764-thoughts-on-security-of-kicksecure-debian-based-linux-distribution/15 Otherwise I agree, people here are as misinformed as /g/ or /r/privacy and significantly more delusional. I've seen a few good takes recently but they're few and far between.

>>27107 >>27108 The biggest red flag for me is when people say "you should use X" or "you should do Y", and then can't explain why when you ask them for details, and can't explain what exactly is wrong when you provide alternatives.

>>27112 What makes you think you're entitled to soykaf out bizarre alternatives to best practice and have people spoon-feed you corrections? Why waste time trying to explain things like TBB design, malloc hardening, or CFI when this site is filled with delusional LARPers who put in no effort trying to engage with any actual research? Links to actual security projects were given, if you want more discussion then go bother them instead of giving soykaf advice to people unfamiliar with computers

>>27116 > What makes you think you're entitled The fact that you post your opinions. If you can't explain them, why anyone should trust you? I didn't audit Tor Browser and it's obviously the most wanted target to place backdoors / supply chain attacks, etc, for every single intelligence agency on the planet. I barely read tor server code either, but I trust it more and I expect it to be audited more thoroughly then TB. If feds were to allocate their time to compromising those, they would focus on TB, because tor server will receive more audits and it requires more skilled people working on it who are less likely to not notice backdoors introduced in commits. Frontends is what often goes underaudited and compromised. Trying to achieve things TB does yourself while understanding what exactly you're doing and why is better in many ways.

>>27119 >I didn't audit >I barely read >I trust it more >I expect it to be aaaaand >Trying to achieve things TB does yourself while understanding what exactly you're doing and why is better dude like cmon have some self awareness >The fact that you post your opinion No, I gave bog standard advice echoed by reputable security projects, just because your security is based on nothing but vibes doesn't mean everyone elses is too jesus christ

>>27120 You said nothing of value in your post, once again. Please save your and our time.

>>27080 >Linux Good start depending on the distro. >Firefox ESR Librewolf is a better (and faster in my experience) option with more secure defaults.

>>27119 I think this would be bad because you are going to create a unique fingerprint when you do things differently from the standard implementations? If you're having fun that's good but the strength of anonymity is in a crowd.

>>27125 > shared fingerprint -> they know you use Tor Browser > if Tor Browser has backdoors they know they can use them against you > unique fingerprint on every page load (via randomization) -> they don't know anything about you, at best they can assume you're faking your fingerprint Some of those features are built-in in Firefox, and there are many alternative implementations for Firefox, Chrome, their forks, and other.

>>27080 OP, this will keep you busy for a while. It's all solid advice from reliable sources. NIST Computer Security Resource Center: https://csrc.nist.gov/ Good software/service recommendations: https://prism-break.org/en/ Riseup security resources: https://riseup.net/en/security/resources P.S. Anyone recommending Chrome or even Chromium is a clueless retard, lol

>>27126 Holy soykaf stop embarrassing yourself >>27128 You've got to be kidding me >https://prism-break.org/en/ >HTTPS Everywhere >Decentraleyes >Privacy BadgerThese have been pointless/obsolete for years, I know people here are inept but this is just sad >is a clueless retard (·•‎ࡇ• )

>>27130 Wow, you found three obsolete but harmless recommendations out of hundreds on the site. Truly earth-shaking. Thank you so much for your contribution.

>>27134 You posted links with badly curated outdated and counterproductive advice that took all of two seconds to poke holes into >solid advice from reliable sources ffs that site has been barely updated for 10 years, you've got to be a glowie people can't be this braindead

>>27135 Thank you for pointing out that csrc.nist.gov, prism-break.org/en/, and riseup.net/en/security/resources are so old, unreliable, and riddled with errors that only a glowie would recommend them. I'm sure that a person of your advanced knowledge could post some newer, more teliable, more correct sources of general security and privacy information at the level of the OP. Would you mind doing so, if you have the time?

>>27150 Have you actually read your own sources or did you just paste what your handler at mossad HQ sent? csrc.nist.gov is nowhere near useful "general security and privacy information at the level of the OP" lmao >Would you mind doing so I already posted relevant links on the software OP posted, your lack of reading comprehension is not my problem. If they want generic privacy and security advice https://www.privacyguides.org/ is up to date, though some of their suggestions are questionable and I've seen the admins have some batshit takes on the forum

there is no security, only the illusion of security

>>27241 there is no such thing as "secure", only "secure enough"

>>27088 https://brainfucksec.github.io/firefox-hardening-guide This is what I used for my firefox browser. >>27085 Secureblue has some good information I agree, just apply https://secureblue.dev/features to your own distro of choice I don't think there is a problem with uBlock Origin though, and I would reccomend that OP keep using it also adding NoScript and the firefox containers addon. Those are the only 3 and no more I can vouch for. >>27091 Agree with this practice of using containers , even if you're using containers whilst your entire computer is connected to a VPN and not having seperate proxies for each container will still go away, the proxies for each container is just a nice bonus of security. >>27107 Nice try glowie >>27243 This also to an extent

>>27080 >Firefox ESR Throw away that garbage as hard as you can, and get either Ungoogled Chromium or GNU IceCat >uBlock Origin uMatrix is better, but I warn you it takes time to get used to it. >Startpage Better use either mojeek or SearX or 4get

>>27251 > Throw away that garbage Any other browser that supports tab containers with per-container proxy settings?

>>27252 You'll want to use Librewolf