Advanced Plus Security Kongo's PC Security Config

[Sampei.Nihira]

Hi,
any updates regarding the use of NoScript?

 

[LinuxFan58]

Pretty strong setup, you have got tripple protection against exe's, have you ever tried to increase protection against scripts?

WHHL can also be used as old SWH only.

 

[Kongo]

Hi,
any updates regarding the use of NoScript?

Still running it in auto-mode. Need to temporary whitelist some sites tho.

Pretty strong setup, you have got tripple protection against exe's, have you ever tried to increase protection against scripts?

WHHL can also be used as old SWH only.

Thanks. I have tweaked Deep Instinct to the max, so malicious scripts shouldn't be a problem.

Spoiler: Script protections

 

[Kongo]

+ added JShelter to Firefox
- removed NoScript

coveryourtracks result with my current setup:

 

[Kongo]

Firefox:

- removed all about:config tweaks
+ added Mullvad Extension to Firefox (New "Random Mode" enabled)

When enabled, a random proxy is assigned per domain. On browser restart, proxies are rotated.
This will override any other proxy.

With all the privacy concerns that are popping up in our digital world right now, mainly caused by various gouvernments, I am now trying to focus more on privacy again. So if you guys have any recommendations for my setup, please don't hesitate to share. Security-wise I am pretty confident right now, that I am well-positioned.

 

[Sampei.Nihira]

If you want to improve your privacy,and you’re already effectively protected against fingerprinting I think you should switch from Ghostery to uBlock Origin, which offers better privacy protection even in Easy Mode.
I’ll just mention the ability to block “Uncloak Canonical Names” extremely effectively.

Another important feature is the blocking of URL tracking parameters, which complements the built-in functionality in Firefox,which, in my opinion, is rather limited compared to the AdGuard/uBO filter list:

• URL Tracking Protection available in uBlock Origin.

You can verify this with this test:

Test cases for brave/brave-browser#4239

Think about it.

You can also use an AI to help you determine whether the enhanced privacy you're looking for works better with uBo or Ghostery.
Good choice, and good luck.

 

[Kongo]

If you want to improve your privacy,and you’re already effectively protected against fingerprinting I think you should switch from Ghostery to uBlock Origin, which offers better privacy protection even in Easy Mode.
I’ll just mention the ability to block “Uncloak Canonical Names” extremely effectively.

Another important feature is the blocking of URL tracking parameters, which complements the built-in functionality in Firefox,which, in my opinion, is rather limited compared to the AdGuard/uBO filter list:

• URL Tracking Protection available in uBlock Origin.

You can verify this with this test:

Test cases for brave/brave-browser#4239

Think about it.

You can also use an AI to help you determine whether the enhanced privacy you're looking for works better with uBo or Ghostery.
Good choice, and good luck.

So you think there is a big advantage in replacing Ghostery with uBlock Origin, considering that my DNS and Firefox in Strict mode is also blocking trackers? I kind of feel like that it would be overkill?

 

[Sampei.Nihira]

So you think there is a big advantage in replacing Ghostery with uBlock Origin, considering that my DNS and Firefox in Strict mode is also blocking trackers? I kind of feel like that it would be overkill?

It’s not a big advantage, and I can’t quantify it because it depends heavily on the websites you visit.
If you run a simulation with the AI and enter precise data, you’ll likely get a more accurate comparison.

Take a look at this table generated by ChatGPT:

Spoiler: Trackers

Keep in mind that it’s specific to Chrome and uBo.
If you use Firefox, you have the advantage of CNAME, as I mentioned in my previous post.

 

[SeriousHoax]

If you want to improve your privacy,and you’re already effectively protected against fingerprinting I think you should switch from Ghostery to uBlock Origin, which offers better privacy protection even in Easy Mode.
I’ll just mention the ability to block “Uncloak Canonical Names” extremely effectively.

Another important feature is the blocking of URL tracking parameters, which complements the built-in functionality in Firefox,which, in my opinion, is rather limited compared to the AdGuard/uBO filter list:

• URL Tracking Protection available in uBlock Origin.

You can verify this with this test:

Test cases for brave/brave-browser#4239

Think about it.

You can also use an AI to help you determine whether the enhanced privacy you're looking for works better with uBo or Ghostery.
Good choice, and good luck.

Besides, Ghostery uses EasyList and uBO filter lists. So @Kongo unless there's any Ghostery specific feature that you really like, I don't see any reason to use Ghostery over uBO.

adblocker/packages/adblocker/assets at e9e08a5634d66cbb291f40036c05927832b94564 · ghostery/adblocker

Efficient embeddable adblocker library. Contribute to ghostery/adblocker development by creating an account on GitHub.

github.com

 

[Kongo]

Besides, Ghostery uses EasyList and uBO filter lists. So @Kongo unless there's any Ghostery specific feature that you really like, I don't see any reason to use Ghostery over uBO.

adblocker/packages/adblocker/assets at e9e08a5634d66cbb291f40036c05927832b94564 · ghostery/adblocker

Efficient embeddable adblocker library. Contribute to ghostery/adblocker development by creating an account on GitHub.

github.com

I am not using Ghostery for their ad-blocking capabilities. I know that uBlock Origin and Adguard do better at it. I use it for the tracking protection:

What is Anti-Tracking?​

The Anti-Tracking feature is a heuristic approach to real-time, algorithmic tracking protection. Like Ghostery's Ad-blocking, it monitors all third-party requests. However, instead of simply blocking those requests, it analyzes them for personally identifiable information and then strips out that information before the request is sent. Anti-Tracking supplements Ghostery's block-list approach by catching anything that might have been missed. Therefore, even if trackers are allowed to execute, you can feel safe knowing that all personal information has been anonymized in the request.

What is Tracker Cloaking Protection?​

Tracker Cloaking Protection is an advanced privacy setting offered in Ghostery Private Browser. Some trackers use a technique called CNAME cloaking where they pretend to be first-party code by mimicking legitimate subdomains of the websites they are present on, thereby avoiding detection as a third-party technology. The Ghostery Private Browser has a technology to unmask and block these cloaked trackers.

This technology works in Gecko based browsers only like Firefox and Ghostery Private Browser.

 

[SeriousHoax]

I am not using Ghostery for its ad-blocking capabilities. I know that uBlock Origin and Adguard do better at it. I use it for the tracking protection:

I see. The uncloaking part is also covered by uBO in Firefox and your DNS which I think you already know. I wonder how effective Ghostery's heuristic-based info stripping anti-tracking feature. It sounds like a good feature.

 

[Sampei.Nihira]

@Kongo
@SeriousHoax

I can answer your questions because I had ChatGPT analyze exactly what you’re asking about some time ago.
Take a look at the first image, which is specific to my Security setup:

Spoiler: Adblocks

I was surprised by the “Fingerprinting Resistance” entry in Ghostery, so I asked for an explanation, which I’ve summarized in the table below:

Spoiler: Fingerprinting Resistance

I hope this helps.

 

[AFEH]

@Kongo
@SeriousHoax

I can answer your questions because I had ChatGPT analyze exactly what you’re asking about some time ago.
Take a look at the first image, which is specific to my Security setup:

Spoiler: Adblocks

View attachment 297100

I was surprised by the “Fingerprinting Resistance” entry in Ghostery, so I asked for an explanation, which I’ve summarized in the table below:

Spoiler: Fingerprinting Resistance

View attachment 297101

I hope this helps.

Can uBO, in such comparison, be replaced by Brave adblocker, considering uBO is going to stop working later?

 

[Sampei.Nihira]

Can uBO, in such comparison, be replaced by Brave adblocker, considering uBO is going to stop working later?

If you're wondering whether you can replace Brave Adblock in the first table with the usual uBo performance, I'm certain you can't, because my uBo configuration is too specific.
ChatGPT also rated AG as having lower performance than uBo, so I'm sure Brave Adblock will suffer the same fate.

An uBo in Easy Mode almost certainly would.
But I’ve never made that comparison.
So ultimately, I can only speculate; to be precise, I don’t know.

 

[Kongo]

Big DNS changes:

- removed NextDNS on all devices
- removed Mullvad extension
- removed SafeToOpen extension
+ added ControlD with two profiles (one network-wide and one only for desktop browser)


I used NextDNS for many years and barely had any problems with it. In the last 2 years however it felt like nothing new was coming and that they just neglected the service. So now I am using ControlD as an alternative. So far I am really happy with my setup.

 

[Kongo]

+ added APIVoid Browser Protection to Firefox
- replaced Hibit Uninstaller with Geek Uninstaller Pro

 

[simmerskool]

+ added APIVoid Browser Protection to Firefox
- replaced Hibit Uninstaller with Geek Uninstaller Pro

@Kongo I have used Geek (free) -- can you elaborate on why Geek Uninstaller Pro... ie, better? How?

 

[Kongo]

@Kongo I have used Geek (free) -- can you elaborate on why Geek Uninstaller Pro... ie, better? How?

Well it has some few advanced features like installation tracking but to be honest the free version seems to be just fine. I wouldn't buy the pro version again. But as it is a lifetime license...

 

[simmerskool]

Well it has some few advanced features like installation tracking but to be honest the free version seems to be just fine. I wouldn't buy the pro version again. But as it is a lifetime license...

while I was waiting for your comment, I asked chatgpt to compare various uninstallers and Geek Pro ranked very highly, and it's only $24 US for lifetime, so expect I will get it, I have used the free in the past... and never had an issue with it.

 

[Kongo]

while I was waiting for your comment, I asked chatgpt to compare various uninstallers and Geek Pro ranked very highly, and it's only $24 US for lifetime, so expect I will get it, I have used the free in the past... and never had an issue with it.

Again, I don't really see a big value in the pro version so I personally wouldn't recommend it. But it is up to you of course. The free version is just so simple and that's what I like. No bloat, just the features that you expect.