Is there a way to backup/restore for the current settings before making adjustments, and is there a “factory reset” option, to return to default settings, should things go awry?

hello n.n

i have a question… what about plug ins like Privacy Settings from firefox addons, it’s useful?
thanks n.n

• This reply was modified 6 months ago by  Kirsty.

? says:
Thanks for the heads up everyone appreciates all the extra security we can get these days…
I’m running persistent live cd usb’s so i’m not too worried about any more borking than I already do for myself. I ran all the telemetry blocking after you let us know about it the other day and no problems, so far.
Check with our security loving German compatriot Martin Brinkmann’s Ghacks.net for three more:

http://www.ghacks.net/2013/04/27/firefox-prefetching-what-you-need-to-know/

the way i’m running (on purpose) makes worries about viruses non existent
the big eye in the sky can look all it wants (it is going to anyway) so when i’m feeling extra frisky and bored i will lead it back onto itself… kinda like the endless loop (yes i did) on the old mainframe arpanet… see:https://en.wikipedia.org/wiki/ARPANET if interested.
anyway, enough from me (for now) and thanks again for having my back whilst on our journey riding the wild interweb today…

I followed all the suggestions and it seems that all but one of my dozens of open tabs work normally. However, feedly.com gave me the dreaded “Oops. Something went wrong!” page. As feedly is my most accessed site, I may have to copy back my saved profile. Bummer! BTW, it is not that feedly is coincidentally having problems, as it shows up OK in Chrome.
Any ideas which of the many settings may have borked feedly?
kk

It might also be worth unticking ‘play drm content’ if you’re not using it. I also unticked the ‘block dangerous and deceptive content’ option under security because that communicates back to the google mothership – https://support.mozilla.org/t5/Protect-your-privacy/How-does-built-in-Phishing-and-Malware-Protection-work/ta-p/9395 – i have enough other protections in place for me not to be too concerned with this but ymmv.

-T

Nice job. For those of us not intimately familiar with FireFox it’s nice to have a targeted list with some explanations.

-Noel

1 user thanked author for this post.

Microfix

Microfix wrote:

The top two security tweaks are the most important LOGJAM & POODLE even if they are set correctly without changing them, it’s better to check anyway.

thanks for the advise n.n/
i’m using FF ESR and logjam “problem” is present, now is fixed (yeah).
(somebody maybe ask… why im using esr? it’s because i feel more stable tan “normal” version)

Backing Up Firefox Profiles both when Firefox and its Extensions are Available and when Firefox and its Extensions are Not Available:

For Windows, Mac and Linux, these instructions look good:
https://www.howtogeek.com/255587/how-to-find-your-firefox-profile-folder-on-windows-mac-and-linux/

What differs is the exact location of the Mozilla or Firefox Profile Directories, and the kinds of permissions and hidden attributes which need to be considered for a successful copy-paste backup procedure.

Good storage options include a separate partition, a USB device, or an external drive. Preferably with an extra copy on an external drive just in case.

Both backing up and restoring are simple copy-paste operations.

BTW, Firefox and Chrome, Edge and Internet Explorer, all by default now exclude the insecure cipher sets which logjam and poodle relied on. No internal tweaking is required unless you are using a site which still relies on older, insecure cipher suites. Which no one should be doing now. The same applies to the TLS and SSL settings involved in these attacks.

I personally do use Ghostery, Abine Blur, HTTPS Everywhere and an extension to block HTML autoplay, for security and privacy. If NoScript is added, pretty much all telemetry and DOM and persistent cookie tracking can be blocked. (This involves using some Extension settings which are not set by default. Also, Click And Clean Extension has some settings panels, but these are more useful for Chrome — see below — than for Firefox.)

Tweaking the Firefox config. settings may bork the browser or make some sites unusable, so this is not my recommended action. It’s a lot easier to reset, suspend or disable an extension than to reconfigure a borked config. file.

RELATED ABOUT CHROME SETTINGS:
We should develop a KB article here about the changes in Chrome 57 with regard to Flash Player and Plugins controls. Most former Chrome Plugins have been moved to Extensions. There are also security settings which have been moved into little icons in the Location Bar in Chrome 57.

These changes have caused a lot of finger-pointing, false accusations of loss of user controls and general confusion among Chrome users. I am still sorting through these Chrome changes. And unlike Firefox, if you mess with the Chrome configuration settings, you have no easy way to back up and restore these settings. Which is why the Chrome://Plugins page is no longer available to users.

• This reply was modified 6 months ago by  rc primak. Reason: add specific details

hello n.n
what about “about:telemetry” option? does help in something?
sorry for many questions…

Re: Additional Privacy Tweaks #5

woody wrote:

geo.wifi.uri set to 127.0.0.1

My setting is [http://localhost:8888/]
Does this need to be changed?

Additional Privacy Tweaks Note 3):
Setting the ‘dom.storage.enabled’ entry to false can “break” some websites as they are reliant on DOM storage tracking.
Changing this setting should therefore be done with caution.
If you have done this and find website does not display, revert setting back to default.

• This reply was modified 6 months ago by  Microfix.

1 user thanked author for this post.

Rick R

An additional security tweak for a link issue which has recently resurfaced using language coding for weblinks.

The problem: Some letters in other languages like Cyrillic are different but look almost identical. You can get identical-looking versions of “a”, “B”, “c”, “i”, “l”, “O” and “p,” among others.

So by combining the codes for these other letters with non-coded letters you can appear to spell out a word like “apple,” therefore tricking people into visiting a different website from the one they think they are visiting.

To avoid this go to:

about:config

set the following string to TRUE

network.IDN_show_punycode

Source: Here

In depth info: Link

• This reply was modified 4 months ago by  Microfix.
• This reply was modified 4 months ago by  Microfix. Reason: in depth info link added

3 users thanked author for this post.

Rick R, HiFlyer, Elly

I want to point out that anyone resetting “dom.storage.enabled” = False, will encounter an issue with the Microsoft Catalog.

Thanks to Microfix for mentioning potential issues regarding websites. It helped me identify the change that broke MS catalog.

I use the MSCat for Group B downloads, so for others in B, set this to default (True).

This is what you get with “False” set.

• This reply was modified 2 months, 3 weeks ago by  Rick R.
• This reply was modified 2 months, 3 weeks ago by  Rick R.