FF addons&extensions

cross-posted from: https://lemmy.world/post/31884410

How can a site see what extensions you have?

One of the things I've seen mentioned before is that installing too many extensions can make you more unique, and thus have a negative influence on your fingerprint. This got me curious, how exactly do sites detect which extensions you have anyway? Can they outright read your list of extensions?

Furthermore, do all extensions make you more unique? I guess the answer would depend on the answer to the first question (surely, if they can just outright see your list, then the answer would be yes), but lets say you install something that seems rather innocuous, like Transparent Standalone Images, for example. Can a site see that this is installed / does it make your fingerprint more unique?

explanation

Web sites do not have any way to enumerate or query your installed extensions, and they cannot directly "see" the content scripts injected by extensions. However, some extensions do modify pages in a way that scripts in the page could recognize as being the work of a particular extension, assuming the owners of the site care to research and check for such things.

One particular issue is that an extension may insert a path into the document to a page or image in the extension itself. Firefox assigns a randomized UUID to the extension at install time, and the path uses this UUID. On the plus side, this may prevent the site from associating the URL with a specific extension. On the minus side, at least in theory, a site could detect this weird URL in the page and use that for fingerprinting. See: How to prevent fingerprinting via Add-on UUID?.

is there anything else that I should notice?

Thank you!

cross-posted from: https://lemmy.world/post/31887590

Please see the cross-post as it is updated.

What is the difference between Chameleon and JShelter?

• Chameleon – Get this Extension for 🦊 Firefox Android (en-US)
  • Chameleon is a WebExtension port of the popular Firefox addon Random Agent Spoofer.
• JShelter – Get this Extension for 🦊 Firefox Android (en-US)
  • JShelter is a browser extension to give back control over what your browser is doing. A JavaScript-enabled web page can access much of the browser's functionality, with little control over this process available to the user: malicious websites can uniquely identify you through fingerprinting and use other tactics for tracking your activity. JShelter aims to improve the privacy and security of your web browsing.
  • Like a firewall that controls network connections, JShelter controls the APIs provided by the browser, restricting the data that they gather and send out to websites. JShelter adds a safety layer that allows the user to choose if a certain action should be forbidden on a site, or if it should be allowed with restrictions, such as reducing the precision of geolocation to the city area. This layer can also aid as a countermeasure against attacks targeting the browser, operating system or hardware.

JShelter seems to spoof info by controls the APIs provided by the browser? and Chameleon spoofs user agent and many other information.

To me both seems to serves the same purpose of spoofing. Is Chameleon spoofing without interfering with js and JShelter spoofing with interfering with js the main difference between them? In addition JShelter seems to be able to block malicious js

How JShelter and Chameleon achieves spoofing differently?

cross-posted from: https://lemmy.world/post/31887590

Please see the cross-post as it is updated.

cross-posted from: https://lemmy.world/post/31889138

Please see the cross-post as it is updated.

Is there a firefox extension that disable the web connection of other extensions?

cross-posted from: https://lemmy.world/post/31889138

Please see the cross-post as it is updated.

cross-posted from: https://lemmy.world/post/31796865

Should I Disable WebSocket Connection on My Web Browser (in terms of privacy)?

Considering disabling WebSocket connections for security reasons. Any experience or thoughts? Have you disabled WebSockets? Any notable issues or performance changes?

Please see the cross-post as it is updated.

I created an extension adding a “Similar repositories” section to the sidebar of any public GitHub repository with more than 150 stars. It allows you to discover related open-source projects without leaving the page.

It's also open-source! https://github.com/Mubelotix/SimRepo

I'm actually pissed. I and many other users on the forum got an email from Chris Hayes on this:

Hello,

This is a friendly email to make you aware that your personal email address is currently visible to the whole internet via Mozilla's Discourse forum. It will show up in Google Search results. The affected email is the one that this email was sent to.

Many users may not be aware that their email address is publicly visible and Mozilla has not done anything about it in the 4 years it has been known, so I've taken this into my own hands to inform you.

What can you do?

You can update your profile name to be something else (actually, profile name is completely optional, so you can leave it blank if you want).

Steps to update profile name:

1. If you search for "Mozilla Discourse forum" it should be one of the first results.
2. Login. (Top-right)
3. Click on your profile picture at the top right.
4. Then, click on your username, at the top of the dropdown menu.
5. Click on the "Preferences" button.
6. Change the "Name" field, and click "Save Changes".

How did this happen?

There's a misconfiguration with Mozilla's Discourse forum that when you sign up with your Firefox account, it will by default use your personal email address as your profile's public name.

This is not a new issue, and has been known since 2020. The Mozilla Discourse forum is not actively maintained by Mozilla, so this has yet to be fixed.

You are one of 4,630 other users impacted by this privacy issue. It impacts 19% of all forum users, and 28% of new users.

More information:

There's a Discourse discussion about this problem here: https://discourse.mozilla.org/t/email-is-displayed-by-default-for-the-new-account/92266

If you have connections to Mozilla, please help escalate this issue to the right people. This is a serious and long-standing privacy issue at an organization that should value "Privacy by default".

Sincerely,@chrisA fellow Mozillian

I am not Mozilla: This is not an official Mozilla email, I do not represent or work for Mozilla. This is an email from a fellow community member spreading awareness of this unaddressed privacy issue.

For instance, I watch a video on Shout Factory and then pause, close the tab and when I go back to the link it goes back to where I left off.

I see a few selections for desktop, but the only mobile options I have found so far only work with chrome. I have used a search engine and looked on the add-ons page as well as on GitHub.

Basically the goal is to remove facebook posts that are about certain topics using keywords. Other features are cool too. Any suggestions?

Hey everyone,

I created an addon to bring touchscreen navigation gestures to the desktop version of Firefox, so mainly for 2-in-1 laptops and Linux/Windows tablets. It adds back/forward navigation and pull-to-refresh gestures, shows the same icons as existing touchpad gestures, and will check beforehand if you can still scroll in a given direction.

Here is the link: Touch Navigation

This is a RES-like script to let you navigate all Lemmy and mlmym sites with your keyboard!

Github is here https://github.com/vmavromatis/Lemmy-keyboard-navigation

Feedback always welcome 🙏🏾🙏🏾🙏🏾

so I was making an extension for firefox where it calculates and displays a user's Karma. Now the extension works perfectly fine when you paste in your profile and go there, or if you refresh your profile. but if you go to the main menu of Lemmy, then back to your profile by clicking on your profile, the extension simply doesn't work.

Sometimes on my Mac I want to open a image that could be opened in a new tab, directly into the Preview app (the default photo viewing app). It would be great if I could have a context menu option when right click images, to open them in the app, I wonder if there’s an addon to do this.

Close all tabs of a container from the tab context menu or a toolbar button popup.
#privacy
to be used with temporary containers with setting to delete the container after last tab closes.

Share the current tab on the fediverse

new version released ☺

Updates

• fix Friendica API issue.
• Improve CSS style in the options page.
• Doesn’t require any permissions :blobspy:
• More services supported.
• improved integration with different versions.

screenshots

GNU IceCat / Firefox-ESR

Trisquel Abrowser / Firefox Standard

dark mode

Open a blank dark or white tab rather than the default browser's new tab page.

Create, manage and switch between browser profiles seamlessly.

• Local-Storage (Firefox 58+ only)
• History & Downloads
• This can be delayed in seconds
• Cookies (optionally only when not whitelisted)
• Local Storage (optionally only when not whitelisted on Firefox 58+)
• History
• Downloads
• Form Data
• Passwords
• Indexed DB
• Plugin Data
• Service Workers
• Server Bound Certificates
• Cache
• Delete thirdparty cookies on creation

Different cleanup types can be applied:

-Never: No cleaning.
-On Startup: Clean only on browser start.
-On Leave: Clean on domain leave and on browser start.
-Instantly: Prevent data from being set, if possible. Otherwise

Explore the press with no middlemen between the newspapers and your computer. Discover millions of results within seconds and explore the last ones in Firefox via this addon. Select your press review and export it in a few clicks.

by Bernard

Very useful and pleasant to use. You almost don't have to move your fingers out of the keyboard with this extension.

Redirect social media links to privacy-respecting alternative front ends, or redirects to an alternate service such as Google Maps -> Open Street Map