~kris/dots

srice

srice/.config/tor/user.js -rw-r--r-- 4.5 KiB
e98f3b03 — Kris Yotam chore: sync local state after restore (push updates, no pull) a month ago 
                                                                                
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116

/**************************************
 * 🧙🏾‍♂️ Kris Yotam's GOD-TIER user.js *
 * Tor Browser hardening and tuning   *
 **************************************/

/** Disable WebRTC (prevents IP leaks via STUN/ICE) **/
user_pref("media.peerconnection.enabled", false);

/** Fingerprinting Resistance **/
user_pref("privacy.resistFingerprinting", true); // Enable general RFP
user_pref("privacy.resistFingerprinting.reduceTimerPrecision", true); // Lower resolution of JS timers
user_pref("privacy.resistFingerprinting.reduceTimerPrecision.microseconds", 1000); // Coarsen to 1ms
user_pref("privacy.resistFingerprinting.letterboxing", true); // Avoid screen-size fingerprinting

/** Timezone & Locale Spoofing **/
user_pref("privacy.resistFingerprinting.screen_resolution", [1000, 1000]); // Fake screen res
user_pref("privacy.resistFingerprinting.randomizedNames.enabled", true);

/** Use DuckDuckGo Onion as Homepage **/
user_pref("browser.startup.homepage", "https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/");

/** Disable Disk Cache (no residual data saved) **/
user_pref("browser.cache.disk.enable", false);
user_pref("browser.cache.memory.enable", false);
user_pref("browser.cache.offline.enable", false);
user_pref("network.http.use-cache", false);

/** Disable Browsing History & Form Data **/
user_pref("places.history.enabled", false);
user_pref("browser.formfill.enable", false);
user_pref("signon.rememberSignons", false);

/** Enforce Private Browsing Mode **/
user_pref("browser.privatebrowsing.autostart", true);

/** Disable Telemetry, Experiments, and Studies **/
user_pref("toolkit.telemetry.enabled", false);
user_pref("toolkit.telemetry.unified", false);
user_pref("toolkit.telemetry.archive.enabled", false);
user_pref("datareporting.healthreport.uploadEnabled", false);
user_pref("app.shield.optoutstudies.enabled", false);

/** Disable Battery Status API **/
user_pref("dom.battery.enabled", false);

/** Disable WebGL (defends against fingerprinting) **/
user_pref("webgl.disabled", true);

/** Disable canvas readout (prevents pixel fingerprinting) **/
user_pref("privacy.resistFingerprinting.block_mozAddonManager", true);
user_pref("canvas.capturestream.enabled", false);
user_pref("gfx.offscreencanvas.enabled", false);

/** Disable clipboard snooping **/
user_pref("dom.event.clipboardevents.enabled", false);

/** Disable Speech Recognition & Input APIs **/
user_pref("media.webspeech.recognition.enable", false);
user_pref("media.webspeech.synth.enabled", false);

/** Disable Notifications & Push **/
user_pref("dom.push.enabled", false);
user_pref("dom.webnotifications.enabled", false);

/** Block all forms of speculative connections (preloading, etc) **/
user_pref("network.dns.disablePrefetch", true);
user_pref("network.prefetch-next", false);
user_pref("network.http.speculative-parallel-limit", 0);
user_pref("network.predictor.enabled", false);

/** Enforce SOCKS DNS (no DNS leaks) **/
user_pref("network.proxy.socks_remote_dns", true);

/** Disable DNS-over-HTTPS (we're using Tor DNS!) **/
user_pref("network.trr.mode", 5);

/** Disable all telemetry pings from extensions **/
user_pref("extensions.getAddons.cache.enabled", false);
user_pref("extensions.webservice.discoverURL", "");

/** Kill all autoplay **/
user_pref("media.autoplay.default", 5); // Block all autoplay media
user_pref("media.autoplay.allow-extension-background-pages", false);

/** Hide internal IPs from JS (especially in WebRTC leaks) **/
user_pref("media.peerconnection.ice.no_host", true);

/** Enforce First-Party Isolation (already default in Tor, but here anyway) **/
user_pref("privacy.firstparty.isolate", true);

/** Optional: Disable JavaScript on non-onion sites (breaks things, but ultra-paranoid) **/
// user_pref("javascript.enabled", false);

/** Bonus: Set blank new tab **/
user_pref("browser.newtabpage.enabled", false);
user_pref("browser.newtab.url", "about:blank");

/** Disable auto-updates (if you want to manage them manually) **/
user_pref("app.update.auto", false);

/** Disable Pocket garbage **/
user_pref("extensions.pocket.enabled", false);

/** Optional: Show Tor circuit info automatically **/
// user_pref("extensions.torbutton.display_circuit", true);

/** Block all extensions except verified Tor Browser ones **/
user_pref("xpinstall.signatures.required", true);
user_pref("extensions.autoDisableScopes", 15);

/** Maximize content process isolation **/
user_pref("security.sandbox.content.level", 5);

/** Extra Juice: Make Firefox *say no* to ping tracking **/
user_pref("browser.send_pings", false);
user_pref("browser.send_pings.require_same_host", true);