1
0
Go to file
earthlng 15c68dc344 disable System Add-on updates (#595)
remember the new Coverage Telemetry shit? with a **hidden** opt-out pref? guess what, they are already collecting for 3 months ...

https://bugzilla.mozilla.org/show_bug.cgi?id=1487578 - **3 months ago**: "I see data coming in that looks reasonable"

guess what else ...

"It has also replaced the previous version that was there (from bug 1480194)" and oh, surprise surprise, 1480194 is ACCESS DENIED!

they're not just using private tickets to hide security critical information from potential hackers and blackhats, no they also use it to hide shady AF things. Things that they fully know are shady as fuck and that they absolutely know a lot of people would not like. There's simply no other reason why they'd do that

but wait, that's not all. If you think an opt-out pref that 99% of people wouldn't know about even if it showed up in about:config BUT ALSO HAPPENS TO BE HIDDEN is kind of questionable, well ... the system addon that they use for this shit apparently looked or still looks for `toolkit.telemetry.coverage.opt-out` [1] instead of `toolkit.coverage.opt-out` as their documentation [2] claims

[1] https://github.com/mozilla/one-off-system-add-ons/pull/131/files#diff-6e0cbf76986d04383ccb32a29ef27a7aR25
[2] https://hg.mozilla.org/mozilla-central/file/tip/toolkit/components/telemetry/docs/data/coverage-ping.rst#l32

It's time to opt out of all that shit for good. Disable system addon updates and kill it at the root

> In FF61 and lower, you will not get any System Add-on updates except when you update Firefox

on its own that's not true. You will get SA updates unless you disable app update checks + auto install. Let's just remove that as well.
2018-12-14 03:21:57 +13:00
scratchpad-scripts Update ghacks-clear-[removed].js 2018-12-12 13:22:58 +00:00
wikipiki Add files via upload 2018-10-28 03:57:54 +13:00
_config.yml Update _config.yml 2018-10-27 16:29:34 +00:00
.gitattributes Update .gitattributes 2018-08-06 22:31:21 +00:00
.travis.yml Added Travis CI configuration 2017-03-01 00:11:05 +02:00
LICENSE.txt Create LICENSE.txt 2017-02-18 08:57:08 +13:00
prefsCleaner.bat P*tches for B*tches (#483) 2018-08-12 11:56:47 +00:00
prefsCleaner.sh v1.1 regex fix (#409) 2018-04-25 22:56:54 +02:00
README.md Update README.md 2018-12-10 19:26:17 +00:00
updater.bat fix -updatebatch (#484) 2018-08-13 12:39:24 +00:00
updater.sh updater.sh: add -e option for ESR users (#565) 2018-12-01 14:47:58 +00:00
user.js disable System Add-on updates (#595) 2018-12-14 03:21:57 +13:00

user.js

A user.js is a configuration file that can control hundreds of Firefox settings. For a more technical breakdown and explanation, you can read more on the overview wiki page.

ghacks user.js

The ghacks user.js is a template which aims to provide as much privacy and enhanced security as possible, and to reduce tracking and fingerprinting as much as possible - while minimizing any loss of functionality and breakage (but it will happen).

Everyone, experts included, should at least read the implementation wiki page, as it contains important information regarding a few ghacks user.js settings.

Note that we do not recommend connecting over Tor on Firefox. Use the Tor Browser if your threat model calls for it, or for accessing hidden services.

Also be aware that this user.js is made specifically for Firefox. Using it as-is in other Gecko-based browsers can be counterproductive, especially in the Tor Browser.

Sitemap: Releases, changelogs, Wiki, stickies. diffs

acknowledgments

Literally thousands of sources, references and suggestions. That said...

  • Martin Brinkmann at ghacks 1
  • The ghacks community and commentators
  • 12bytes
    • The 12bytes article now uses this user.js and supplements it with an additional JS hosted at GitLab

1 The ghacks user.js was an independent project by Thorin-Oakenpants started in early 2015 and was first published at ghacks in August 2015. With Martin Brinkmann's blessing, it will keep the ghacks name.

License: MIT