Jump to content

Firefox configuration hardening


Togijak

Recommended Posts

I found this hint in the best german computer magazine c't (google translated)

Quote

user.js project of pyllyukko (english language)
For advanced users: The user.js file of the Finnish developer pyllyukko overwrites the preferences of the Firefox user and is therefore also suitable to harden strange systems from rather low-profile users - for example in the family - without losing much comfort. If you copy the user.js into the Firefox main directory, the change affects all profiles. It is also possible to copy them into a single profile directory, to test them first, or create a temporarily safer surfing environment. The user.js of pyllyukko changes more than 200 parameters in the browser, switches off unneeded APIs.

 

user.js

Firefox configuration hardening

A user.js configuration file for Mozilla Firefox designed to harden browser settings and make it more secure.

 

Main goals

  • Limit the possibilities to track the user through web analytics.
  • Harden the browser against known data disclosure or code execution vulnerabilities.
  • Limit the browser from storing anything even remotely sensitive persistently.
  • Make sure the browser doesn't reveal too much information to shoulder surfers.
  • Harden the browser's encryption (cipher suites, protocols, trusted CAs).
  • Limit possibilities to uniquely identify the browser/device using browser fingerpriting.
  • Hopefully limit the attack surface by disabling various features.
  • Still be usable in daily use.

How to achieve this?

There are several parts to all this and they are:


Link to comment
Share on other sites


  • Replies 2
  • Views 859
  • Created
  • Last Reply
15 hours ago, Wonder Woman said:

I've found the following to be quite helpful as well: https://www.ghacks.net/2017/02/12/ghacks-net-firefox-user-js-config-0-11-is-out/

 

The most important part of that article is the very last comment.  The Github site has the latest user.js downloads.  

 

Quote

NOTICE: I will no longer monitor any of the comments on the various ghacks user.js articles. If you have any suggestions or questions, use the official repo at github: https://github.com/ghacksuserjs/ghacks-user.js/issues

 

Link to comment
Share on other sites


Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...