Advice Request What Browser Extensions are you using in 2020?

Please provide comments and solutions that are helpful to the author of this topic.
Status
Not open for further replies.
Sort by date Sort by votes
seatedSinger said:
When running a Pihole do you still need uMatrix isn't uBlock is enough at this point?
Click to expand...
Yes because with uMatrix you can use sites with higher security & privacy while blocking these domains with PiHole break the whole site and fine granulation isn't possible then.
uBlock Origin / AdGuard can block elements which a DNS blocker can't so it's important too for blocking annoying Ads.

My combination is: PiHole + uMatrix + AdGuard in new Microsoft Edge with internal Anti-Tracking Protection & SmartScreen enabled
 
  • Like
  • Wow
  • +Reputation
Reactions: oldschool, Parsh, Shiz and 5 others
Upvote 0 Downvote
oldschool said:
For your setup --> Privacy Possum because it blocks tracking, referers, etags and spoofs fingerprint. Plus it doesn't tend to break webpages.

I wouldn't bother with PB, it pretty much just blocks trackers.
Click to expand...
I've been using PP for the last few days and I like it so far (y) I've also been reading the comments on your ClearURLs thread and I'm just wondering if I go with ClearURLs, should I keep PP or is it redundant? I know that ClearURLs blocks eTags, but does it block trackers like Privacy Badger/Possum?
 
  • Like
Reactions: Protomartyr, CyberTech, toto_10 and 1 other person
Upvote 0 Downvote
S M G said:
I've been using PP for the last few days and I like it so far (y) I've also been reading the comments on your ClearURLs thread and I'm just wondering if I go with ClearURLs, should I keep PP or is it redundant? I know that ClearURLs blocks eTags, but does it block trackers like Privacy Badger/Possum?
Click to expand...
ClearURLs / NeatURL is in first place for removing URL tracking IDs.
Privacy Badger / Possum for blocking website tracker

I recommend just using AdGuard which can do both tasks ;)
And if you want more, combine that with uMatrix
 
  • Like
  • +Reputation
Reactions: oldschool, Protomartyr, CyberTech and 1 other person
Upvote 0 Downvote
S M G said:
I'm just wondering if I go with ClearURLs, should I keep PP or is it redundant? I know that ClearURLs blocks eTags, but does it block trackers like Privacy Badger/Possum?
Click to expand...

There is some redundancy besides eTags. ClearURLs blocks tracking elements and some domains (feature is optional). PP blocks trackers, referers and randomizes fingerprinting. The decision to keep both or not depends on your browser, other extensions and their installation priority, and your personal preferences about browser performance, privacy considerations, browser compartmentalization, etc.

Note that Brave browser blocks referers by default and has other built-in privacy protections. You may see more info, including other links, here Brave feature review I use Brave with built-in Shields and ClearURLs and call it a day. Sometimes less is more.
 
  • Like
Reactions: Parsh, stefanos, Protomartyr and 4 others
Upvote 0 Downvote
oldschool said:
There is some redundancy besides eTags. ClearURLs blocks tracking elements and some domains (feature is optional). PP blocks trackers, referers and randomizes fingerprinting. The decision to keep both or not depends on your browser, other extensions and their installation priority, and your personal preferences about browser performance, privacy considerations, browser compartmentalization, etc.

Note that Brave browser blocks referers by default and has other built-in privacy protections. You may see more info, including other links, here Brave feature review I use Brave with built-in Shields and ClearURLs and call it a day. Sometimes less is more.
Click to expand...
Thanks oldschool. I think I'll only keep ClearURLs for Brave.
 
  • Like
Reactions: CyberTech, toto_10 and oldschool
Upvote 0 Downvote
Just installed Ungoogled Chromium on my Windows host machine and moved Brave ad FF browsers to VM. Practicing browser compartmentalization with Brave handling all the sign-in accounts and FF for non sign-in general web surfing

Extensions for Ungoogled Chromium

1. uBO
2. BP Privacy Block All Font and Glyph Detection
3. ClearURLs
4. I don't care about cookies
5. CSS Exfil Protection
6. Dark Reader
7. Decentraleyes
8. Detect Zero-Width Characters
9. Keyboard Privacy
10. Adblock Plus
11. Netcraft Extension
12. Random User-Agent
13. Redirector
14. WebRTC Control
15. zwBlocker
16 Scriptsafe
17 Cookie AutoDelete
 
Last edited:
  • Like
  • Wow
  • HaHa
Reactions: CyberTech, toto_10, cliffspab and 9 others
Upvote 0 Downvote
HarborFront said:
Just installed Ungoogled Chromium on my Windows host machine and moved Brave ad FF browsers to VM. Practicing browser compartmentalization with Brave handling all the sign-in accounts and FF for non sign-in general web surfing

Extensions for Ungoogled Chromium

1. uBO
10. Adblock Plus
16 Scriptsafe
Click to expand...
Last time I tried scriptsafe some of the privacy options were not working (forget which but enough to de-install it). uBO seems to overlap with AdblockPlus and ScriptSafe, could you explain why you are using them combined?
 
  • Like
Reactions: toto_10, ForgottenSeer 85179, Protomartyr and 3 others
Upvote 0 Downvote
Lenny_Fox said:
Last time I tried scriptsafe some of the privacy options were not working (forget which but enough to de-install it). uBO seems to overlap with AdblockPlus and ScriptSafe, could you explain why you are using them combined?
Click to expand...
In ABP's advanced setting I leave the fanboy's filters as they are and these will not be included in uBO.

Scriptsafe works but some settings might not work well with some test sites. I mainly use the fingerprinting features. This is typical for extensions with similar fingerprinting features. You may need to combine extensions for effective blocking. The other features I have other extensions to cover.
 
  • Like
Reactions: toto_10 and ErzCrz
Upvote 0 Downvote
HarborFront said:
Just installed Ungoogled Chromium on my Windows host machine and moved Brave ad FF browsers to VM. Practicing browser compartmentalization with Brave handling all the sign-in accounts and FF for non sign-in general web surfing

Extensions for Ungoogled Chromium

1. uBO
2. BP Privacy Block All Font and Glyph Detection
3. ClearURLs
4. I don't care about cookies
5. CSS Exfil Protection
6. Dark Reader
7. Decentraleyes
8. Detect Zero-Width Characters
9. Keyboard Privacy
10. Adblock Plus
11. Netcraft Extension
12. Random User-Agent
13. Redirector
14. WebRTC Control
15. zwBlocker
16 Scriptsafe
17 Cookie AutoDelete
Click to expand...
I’m surprised how few people here have even heard of the CSS exfil extension or exploit. I’m assuming the issue still exists and it could improve security.
 
  • Like
Reactions: South Park, toto_10, Protomartyr and 1 other person
Upvote 0 Downvote
blackice said:
I’m surprised how few people here have even heard of the CSS exfil extension or exploit.
Click to expand...

Many MT members know of this type of security risk. They simply aren't that common. And piling on extensions doesn't increase security, but rather attack surface.
 
  • Like
  • +Reputation
Reactions: CyberTech, toto_10, ForgottenSeer 85179 and 5 others
Upvote 0 Downvote
blackice said:
I’m surprised how few people here have even heard of the CSS exfil extension or exploit. I’m assuming the issue still exists and it could improve security.
Click to expand...
You can test CSS Exfil here

www.mike-gualtieri.com

CSS Exfil Vulnerability Tester

This page tests to see if your browser is vulnerable to Cascading Style Sheets (CSS) data leakage. If you are vulnerable, one way to protect yourself is to install the CSS Exfil Protection plugin for your browser.
www.mike-gualtieri.com www.mike-gualtieri.com

My test

1587999673801.png
 
  • Like
  • Thanks
Reactions: CyberTech, toto_10, Protomartyr and 4 others
Upvote 0 Downvote
HarborFront said:
Extensions for Ungoogled Chromium

1. uBO
2. BP Privacy Block All Font and Glyph Detection
3. ClearURLs
4. I don't care about cookies
5. CSS Exfil Protection
6. Dark Reader
7. Decentraleyes
8. Detect Zero-Width Characters
9. Keyboard Privacy
10. Adblock Plus
11. Netcraft Extension
12. Random User-Agent
13. Redirector
14. WebRTC Control
15. zwBlocker
16 Scriptsafe
17 Cookie AutoDelete
Click to expand...
As @SeriousHoax said, Fanboys can be used in uBO. Why use ABP?
You can handle main functionality of CookieAutoDelete and I Don't Care About Cookies (using Annoyance filters), ClearURLs (using Stealth mode config) with Adguard extension.
Decentraleyes can be replaced by other extensions in use and their filters.
Blocking font detection in BP Privacy Block All Font and Glyph Detection can be handled by ScriptSafe font anti-fingerprinting (only <canvas> though, not JS...). Is it anyway necessary?
Preventing keyboard behavioral profiling done by Keyboard Privacy can be achieved with ScriptSafe's. Is it buggy?
Detect Zero-Width Characters already does what Zwblocker does, perhaps more.
You can use anonymizing browser flag or Adguard to do what WebRTC Control tries to achieve. WebRTC Control blocks multiple components, though the outcome is equivalent.
You can spoof the user-agent in ScriptSafe itself instead of using a dedicated extension like Random User-Agent.

Somethings you're trying to achieve look unnecessary to me. Also you're installing "one more extension for that" just to get a little more of something.
I am not saying that all of these can be exactly replaced. However the trade-off is worth it IMO. Minimal yet sufficient.
I believe you know that the attack surface increased (internal & external of the extension) as a result of adding more and more is not generally worth it. Having a huge trawl net does not mean that you collect tons of different fishes on the boat at the same time :)
 
  • Like
  • +Reputation
Reactions: toto_10, bribon77, harlan4096 and 7 others
Upvote 0 Downvote
None extension in the world can spoof the whole unique fingerprint.
Not even the Tor browser can do that.

Extensions can only change the fingerprint, which makes it unique again. Using more anti-fingerprint extensions even make the fingerprint more unique in comparison without these.

Of course you can say that changing fingerprint helps, at least a little bit. But in the end it (sadly!) Doesn't.

Only one thing helps:
Many, many, many user using the same browser without any modifications AND without JavaScript. Period.
And we all know that this will never happen
 
  • Like
Reactions: Nevi, simmerskool, JohnR and 7 others
Upvote 0 Downvote
Status
Not open for further replies.

You may also like...