browser-privacy

Links to web browser privacy and hardening resources, as well as browser fingerprinting and identification developer tools.

Interesting threads

Alternative Browsers

Multi Login App Multi profile anonymising browser. Awesome!
SRWare Iron (Chrome) Chrome with the eye of sauron removed.
Pale Moon (Firefox) Custom-built and optimized Firefox browsers for Windows.
Midori Open source webkit.

Chrome extensions

CanvasFingerprintBlock
Scriptsafe
Ublock
uMatrix Content blocking overkill.

Chrome Config

chrome://flags/#disable-webrtc  (doesn't work, do your spamming in another browser)

Firefox Config / Profile software

Firefox is a bit of a dog, but it’s certainly less invasive than modern chrome builds.

Ghacks Hardened FF user.js Well maintained privacy-focused user.js
ConfigFox - Firefox config management utility.
Firefox Profilemaker Github - Makes FF profiles with secure/private defaults.
Firefox Environment Backup Extension - FEBE allows you to quickly and easily backup your Firefox extensions. Rebuilds extensions individually into installable .xpi files.

Firefox Config / Tweaks

Firefox bullshit removal via about:config - Lots of config tweaks with explanations
Firefox Hardening - This user.js is a bit over the top to be useable day to day, but it’s a good start.

Firefox about:config tweaks

Disable webrtc

	media.peerconnection.enabled;false // disable webrtc
	media.peerconnection.turn.disable;true // disable webrtc
	media.peerconnection.use_document_iceservers;false // disable webrtc
	media.peerconnection.video.enabled;false // disable webrtc
	media.peerconnection.identity.timeout;1 // disable webrtc

Browser Abuse

BeEF - The Browser Exploitation Framework Project / https://github.com/beefproject/beef.
Sniffing browser history using HSTS + CSP - Demo.

Browser Leak Tests

http://browserspy.dk/
https://www.browserleaks.com/
https://panopticlick.eff.org/
https://ipleak.net/
http://www.dnsleaktest.com/ DNS Leaks test .
https://www.grc.com/dns/dns.htm Another DNS Leaks test .

Web tracking, Browser fingerprinting & Analytics libraries

Evercookie - Produces extremely persistent, respawning cookies in a browser.
Google Analytics It’s kinda scary how much data they collect daily.
fingerprintjs2 - Modern & flexible browser fingerprinting library, a successor to the original fingerprintjs.
UserAgentInfo - PHP class for parsing user agent strings (HTTP_USER_AGENT). Includes mobile checks, bots and banned bots checks, browser types/versions and more.
http://mobiledetect.net/ Mobile Detect is a lightweight PHP class for detecting mobile devices (including tablets). Stacks of plugins.
Browscap - browscap contains a huge database of incredibly detailed specific user agents information but it sucks with newer user agents and sucks even more for mobile detection.

DNS Servers

OpenDNS
	208.67.222.222 
	208.67.220.220 

Level 3
	209.244.0.3
	209.244.0.4 
	4.2.2.1 
	4.2.2.2 
	4.2.2.3 
	4.2.2.4

Comodo Secure DNS
	8.26.56.26 
	8.20.247.20
DNS Watch
	82.200.69.80 
	84.200.70.40 
	resolver1.dns.watch
	resolver2.dns.watch
	2001:1608:10:25::1c04:b12f
	2001:1608:10:25::9249:d69b 
Google
	8.8.8.8
	8.8.4.4

Proxy Providers

SSL Private Proxy All sorts of great stuff.
Squid Proxies Very fast proxies.
Fineproxy.org Good for cheap and short term proxies.

Further Links

privacytools.io Privacytools.io provides knowledge and tools to protect your privacy .against global mass surveillance. Because as it turns out, they really are watching.
OS-X-Security-and-Privacy-Guide - This is a collection of thoughts on securing a modern Apple Mac computer using OS X 10.11 “El Capitan”, as well as steps to improving online privacy.

Papers

Client Fingerprinting via Analysis of Browser Scripting Environment
- https://www.sans.org/reading-room/whitepapers/testing/client-fingerprinting-analysis-browser-scripting-environment-33503 .
**The Web Never Forgets: Persistent Tracking Mechanisms in the Wild **
- https://securehomes.esat.kuleuven.be/~gacar/persistent/the_web_never_forgets.pdf
New browser fingerprinting tricks / http://zyan.scripts.mit.edu/sniffly