So as the title mentions, I’m wondering how much is too much?
I am currently using Brave with the setting to:
- Aggressively block trackers & ads
- Only connect with HTTPS
- Block fingerprinting
- Block cross-site cookies
In addition to that, I have installed the following extensions:
- uBlock Origin
- Ghostery
- Decentraleyes
- DuckDuckGo Privacy Essentials
So my question is: Is this overkill? If so, what should/could be removed that may be redundant? I want as much coverage as possible, but not have things bloated.
I mean ublock origin is really all you need imo so I guess one
One is the right number. Two is too many.
I use the extensions based on the Arkenfox user.js wiki. He describes what’s obsolete or redundant, etc. It’s a good quick read.
Ooh, I like this! Much appreciated.
Please never do this! Read this thread from the developer of uBlock Origin. Using multiple content blockers together like this can and will cause issues, as well as will increase fingerprinting, etc, and there’s no gain or benefit at all from doing so.
I would disable Brave’s built-in ad/tracker blocking (leave the rest of the Shields’ functionality enabled), and would solely use uBlock Origin, and remove the other extensions. (You could even just stick to Brave’s built in ad/tracker blocking if you want to, but I just prefer uBlock Origin for its advanced features and compatibility)
As far as Decentraleyes goes, its essentially abandoned. You can use LocalCDN instead if you wish to do so, though its privacy benefits are debated. I mainly use it since I use uBlock Origin in Hard mode (which it complements uBo very nicely in both Medium or Hard Mode), and for the performance boost it gives, but its up to you. Ghostery and DDG Essentials should definitely be removed. (While DDG Essentials isn’t only content blocking, its other features are also just completely redundant and unnecessary with Brave)
deleted by creator
You just need uBlock. The other add-ons are redundant.
uBlock origin + NoScript. Imo.
But uBlock also has javascript blocking functionality, so I’m not sure NoScript is needed
NoScript also prevents clickjacking, redirection attack (if I remember correctly, also I’m not sure that it’s the correct term), and few more things that I can’t remember right now… From what I’ve heard one can replace them both with uMatrix, haven’t tried it though.
uMatrix is abandoned
I’m surprised no one has forked it yet, or at least none that I know of
I had no idea, thanks.
Pretty sure uMatrix is integrated into uBlock now (at least 90% of the functionality is)
It blocks JavaScript altogether. NoScript is more fine tuned to allow the minimal amount of js to function.
deleted by creator
Never heard that Ublock and DDG isn’t good. Could you link the thread where this was found out?
deleted by creator
Thanks for the ref.
deleted by creator
You can have what Brave does except block ads/trackers, which uBO can cover anyway, but on Firefox or Librewolf instead. For extensions, ditch Ghostery.
Noted! I have been looking into Librewolf… Why is Ghostery not useful?
Ghostery used to sell (or just send back) user data to advertisers. While it was opt-in, that isn’t really a good look for a privacy tool. I stopped using it when that news broke out long ago, but I think now they are also showing ads of their own(?). Either way, uBO does almost everything now. I have Decentraleyes too, along with ClearURLs, and Privacy Badger (which supposedly is redundant to uBO now too).
Use Firefox with ubo. Stop using chromium browsers.
After reading through this whole thread, that’s exactly what I’m doing.
Firefox isn’t as secure as Chromium browsers due to its internal sandboxing and site isolation being substantially weaker (especially on Linux). If you are on a Linux machine, I recommend you use Brave with no ad blocking extensions because first, it comes with an ad blocker by default. Also, the more extensions you have, your attack surface increases.
If you are on Windows, you should be using Microsoft Edge paired with UBO Lite as it offers the highest security and UBO Lite doesn’t have access to the site data. If you are concerned about the telemetry of using Edge, you can turn it off and if you’re still paranoid, you will have to switch to Linux at this point.
deleted by creator
tor using ublock origin would be new to me. do you mean they now ship it by default or do you mean that you can install it like a regular firefox extension?
deleted by creator
With brave you don’t need any of those addons.
On Firefox just uBlock is fine.
brave has its own ‘issues’ that should keep you far away from it.
I don’t use it just because I’m not a fan of how chromium browsers work. They have had some controversies too around their crypto stuff and other things, but I’m not too familiar with them.
Websites can also dingier print you by your browser settings and extensions.
So, having a lot of extensions can defeat the purpose of privacy.
I try to keep default settings and a minimal number of extensions.
It depends on what browser and what extensions. Previously addon could be fingerprinted by detecting what web resourves they used (i think just chromium). On firefox extensions can get detected by sensing certain telltale changes they provide. eg. Inserting js in dom or blocking of ad/tracking domains. Even if the extension itself isnt identified, unique settings and multiple content blockers will make kinds of fingerprinting possible.
deleted by creator
Just one is too many. The goal is to blend in not stand out. Use Mullvad Browser and Tor Browser.
I’ve tested a few browsers using Eff’s Cover Your Tracks website. The best is TOR, but Brave with no extensions is second, it said it provided a randomized fingerprint. Tried it with Firefox with uBlock and it said my comp had a unique fingerprint. Mullvad browser faired slighty better, cant recall the score, but at least it wasn’t unique. I tried it with Librewolf also with a load of extensions and it was a poor score as well. So, imo, you don’t need extensions with Brave. I think my settings are the same as yours.
deleted by creator
Honastpy at this point you should turn them all ofi and set up a pi hole
pihole by itself does not remove all the ads and trackers, just ones that come from different hostnames than the site being accessed–which can be blocked by dns.
a browser-based blocker is essential.
