Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Security and Privacy settings for Firefox Power...

Security and Privacy settings for Firefox Power Users

Web browsers have a difficult job to do: they need to perform remote code execution from untrusted locations in the presence of user data. In other words, they need to display websites that people use to share their information.

There is a constant struggle between making the web more secure and breaking existing websites that rely on the historically lax defaults. We are working hard to raise the bar, but are also making powerful new features available to the Firefox power users.

This talk will examine some of the hidden or advanced settings and extensions that Firefox offers to users who are concerned about their security and privacy. With a little bit of context on the benefits and risks that some of these features provide, you should be able to make informed decisions and tweak your favorite "user agent".

https://www.linuxfestnorthwest.org/2017/sessions/security-and-privacy-settings-firefox-power-users

Francois Marier

May 06, 2017
Tweet

More Decks by Francois Marier

Other Decks in Technology

Transcript

  1. network.cookie.cookieBehavior = 0 network.cookie.thirdparty.sessionOnly = true privacy.clearOnShutdown.cookies = false network.cookie.lifetimePolicy

    = 3 network.cookie.lifetime.days = 5 feeding.cloud.geek.nz/posts/tweaking-cookies-for-privacy-in-firefox
  2. .exe .com .bat .apk .dmg .pl .py .sh .deb .rpm

    toolkit/components/downloads/ApplicationReputation.cpp
  3. user_pref("privacy.trackingprotection.enabled",true); user_pref("privacy.donottrackheader.enabled", true); user_pref("device.sensors.enabled", false); user_pref("media.eme.enabled", false); user_pref("browser.casting.enabled", false); user_pref("pdfjs.disabled",

    true); user_pref("dom.vr.enabled", false); user_pref("dom.gamepad.enabled", false); user_pref("dom.webaudio.enabled", false); user_pref("dom.allow_cut_copy", false); user_pref("dom.netinfo.enabled", false); user_pref("media.video_stats.enabled", false); user_pref("dom.enable_performance", false); user_pref("webgl.enable-debug-renderer-info", false); user_pref("media.peerconnection.ice.no_host", true); user_pref("privacy.resistFingerprinting", true); user_pref("network.http.referer.XOriginPolicy", 1); user_pref("privacy.clearOnShutdown.cookies", false); user_pref("network.cookie.cookieBehavior", 0); user_pref("network.cookie.lifetimePolicy", 3); user_pref("network.cookie.lifetime.days", 5); user_pref("network.cookie.thirdparty.sessionOnly", true); user_pref("layout.css.visited_links_enabled", false); user_pref("network.IDN_show_punycode", true); user_pref("browser.urlbar.trimURLs", false); user_pref("browser.xul.error_pages.expert_bad_cert", true); ? @fmarier
  4. Photo Credits: shooting star: https://www.flickr.com/photos/funcrush/9496927983/ yellow triangle: https://www.flickr.com/photos/tillwe/2974932670/ jail cell:

    https://www.flickr.com/photos/mikecogh/5997920696 speedbump: https://www.flickr.com/photos/jputnam/9078451876/ cookie: https://www.flickr.com/photos/amagill/34754258/ chromecast: https://www.flickr.com/photos/medithit/10165535814/ lamp: https://www.flickr.com/photos/60588258@N00/3806005225