is firefox “protecting” you from enabling master password? restore expected firefox 76 master profile functionality without creepy local OS authentication

Do NOT use any profile of firefox without using ghack’s privacy-enabling user.js profile file. Despite mozilla org lamentations on the state of privacy while boasting their respect of your privacy it is soooper evident they don’t.

https://github.com/ghacksuserjs/ghacks-user.js/wiki/1.1-Overview

 

---

 

For this you’ll need to know how to use Firefox Profile Manager.  You can (and should) partition browsing better than containers with multiple profiles.  Edit your firefox link with these additional switches   (linux, windows, macos)

–no-remote -P

The first switch is a double dash. It allows multiple instances to run each with a profile.  The second switch is a BIG P. You don’t want a small p. It opens the interactive profile picker.

To open the profile directory without knowing where it is open the Firefox Help menu, Troubleshooting information, click 2nd Open Folder.  Alternately browse to about:support

Two options: clear or dirty.  It’s likely most people will want dirty.

Option 1, clean

1. create a new profile
2. backup your primary profile fileset: right click, create new 7z archive. Backup.
3. launch new profile, exit
4. delete all the new profile files
5. downgrade to firefox v74
6. create a copy of these 4 files:
   1. cert9.db
   2. key4.db
   3. pkcs11.txt
   4. logins.json
7. copy them into empty new profile directory
8. copy ghack’s user.js into profile directory
9. launch profile
10. enable Master password
11. delete first copy of 4 files
12. backup new 4 files for easier reuse new profiles
13. upgrade firefox
14. launch new profile
15. import bookmarks from prior profile
16. add back essential adblock extensions, and minimize extension bloat

Option 2, dirty

Edit your firefox link with these additional switches   (linux, windows, macos)

–no-remote -P –allow-downgrade

1. backup your primary profile fileset: right click, and create new 7z archive
   1. store 7z file outside/above a mozilla directory
   2. backup
2. downgrade to firefox v74
3. launch profile
4. enable master password, set password
5. exit profile
6. upgrade firefox
7. copy ghack’s user.js into profile directory
8. launch new profile

 

Profile manager necessity

Not for dirty option strictly.  Embrace your new power

Firefox STILL uses absolute file paths for a number of features.  Copying those files between directories (profiles) is no end of fun to correct.

older versions of firefox

for newer MacOS you want this one
for 64bit windows you want this one
for x64 linuxes self sufficiency is assumed
these are locality en-US.  Change directory yourself to suit

DoH firefox

Now configure DNS over HTTPS in firefox for poweruser adblocking, reducing page loading time, increasing prviacy.  Use both DNS filtering and browser level extension (uBlock Origin, Privacy Possum, Temporary Containers, Multi-Account Containers, Decentral Eyes)

• Settings
• General
• (at bottom)
• Network settings
• [check] Enable DNS over HTTPs
• [check] custom
• paste server address
  • lookup your custom server address on browser sub-tab of https://my.nextdns.io/setup
  • do NOT enter ^ that url into this firefox field.  your address will look lilke https://dns.nextdns.io/0ad5example0ad5/browswernickname (also don’t enter this fake address example)
  • change your browsernickname to whatever to make whitelisting tinkering easier for multiple devices
• Compete their steps 6 & 7 on my.nextdns.io/setup

 

DoH quick configure

 

Currently the default of NextDNS is not-ablocking.  After creating your free account – which is free in the Traditional Sense of the word free – then

• open their tab security: [check] block parked domains, [check] block newly registered
• open their tab privacy: click add block list: choose ‘nextdns recommended’, choose ‘dbl.oisd.nl’.  If windows also choose ‘WindowsSpyBlocker’, and enable ‘Native Tracking Protection’.  If MacOS add ‘Native Tracking Protection’.
• [check] enable disguised tracking protection.  it’s a step closer to ASN level adblocking.
• open their settings page: [UNcheck] block page
• [check] enable logs until you are happy with your blacklist, whitelist, and spoof rules, or if you want to keep pretty graphs

 

future of adblocking

must return to hybridized DNS, privoxy, deeper internets functions like ASN blocking.  The great firefox nightly security features need not bloat the interweb browser.  They need to live in an external proxy.  All hail privoxy.

 

 

webmail adblock

If  you are whoring your privacy for “free” webmail also install Webmail Ad Blocker (maintained by a magical thinking radical progressive with an ironic affection for being paid for his work).  It is a great mix of userscript and css.  I have not raked through its source recently so your privacy value mileage might vary.

 

remove sham extensions

If you are using Ad”block” Plus by deceitful, untrustworthy Wladimir Palant immediately uninstall that sellout’s garbage then install uBlock Origin.  Ad”Block” Plus by default enables a global whitelist to unblock ads.  This is the opposite purpose of adblocking.  His description of the functionality is deceitful.  He is untrustworthy for having it default always to ON.  He collects money from advertisers for placement on his whitelist.  That’s super scummy.

 

ram whore

I leave session manager enabled.  When firefox resource use rises to unacceptable levels I end-task, relaunch profile, and restore some/all session.  This is inane, but essential.  38% cpu and 2.4gigs ram?  No.  Force end. Relaunch. Yay.

 

---

DNS over HTTPS and adblocking extensions are unrelated to the crux of this article but helpful to privacy which is hand in glove with security.

 

making plus.google.com suck less for a friend

disclaimer:  I use ZERO google properties.  I don’t patronize the privacy rape as profit business model hence tolerating some ad block false positives.  Used from friends’ laptop & connection.  When I enable courtesy guest wifi it blocks google properties too.

blocking

||apis.google.com/_/apps-static/_/js/gapi/plusone/
||apis.google.com/js/plusone.js
||plusone.google.com^
||plus.google.com^

subscription blocking

||pagead2.googlesyndication.com^
disabled: @@||adwords.google.com^
@@||maps.google.com/staticmap?*=300×250

 

whitelist

@@|https://plus.google.com/_/scs/$domain=plus.google.com,~subdocument

 

 

voip sms: gouging carriers begin haemorrhaging

Anveo.com :  SMS to SIP, SIP to SMS (using SIP SIMPLE (MESSAGE)), SMS to email, sms to http [get], SMS web ui

Vitelity.com : SMS to SIP, SIP to SMS (using SIP SIMPLE (MESSAGE)), SMS to email, SMS web ui

voip.MS : SMS to email, SMS web ui

sms to xmpp, xmpp to sms — using ‘randomized’ resources

.

there are several VSPs with functional beta systems who wish to remain nameless

Himself being Sagacious

 

google now apple siri compete to create NSA wet dream live

siri or google now : “they” are using “your” phone to always listen.  The ultimate marketing pitch illuminates social indifference to privacy rape as profit.  Sheeple volunteer for voxel ovens

sure “for convenience” like google voice does — ahem as google claims it has never done despite call leg bridging

NSA deep pockets with it’s hands deep in google’s unmentionables

oh, KBG, you were born too soon

I await delightful Peoples Cube posters

all praise chairman obama or else death squad by executive order.  I will be publishing circumventing facial recognition with simple contrast elements

android xmpp GibberBot 0.8.0 now multi-account and OTR

hooray! Beem and GibberBot have been OTR capable for a while, Xabber has been multi-account but not OTR capable, but now GibberBot seems to be more capable than Beem and Xabber combined!

grab 0.8.0 alpha apk: https://github.com/guardianproject/Gibberbot
project site: https://guardianproject.info/apps/gibber/
tracker/apk files now at gp: https://dev.guardianproject.info/projects/gibberbot/files

.

Expect more great advances from the PRIVACY-centric Guardian Project soon!  It’s been over a year since Xabber claimed to [plan to] re-release as Open Source.  Both Beem and GibberBot are Open Source.

WOES, JOES, JOSE. ole? JWA, JWK, JWS, JWT .. JeWST [p: juiced] KAWJd [p: caged]

JOSE gets to work with many woes not far behind

http://datatracker.ietf.org/wg/jose/

• http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-00
• http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-00
• http://tools.ietf.org/html/draft-ietf-jose-json-web-key-00
• http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-00

OTR for now though.  On android that is a small list: Gibberbot and Beem.

[ Himself.wordpress.com ]

PDroid, adds awesome spoofing POWER to android privacy permissions management

edit 2014:  still good XPrivacy Pro [license supports crowdsourced knowledge], but also evolving quickly from the developer of PDroid 2.0 (not svyat) is DonkeyGuard (CollegeDev | github).  DO absolutely combine  AFwall+ firewall  [in whitelist mode] with LightningWall, and UnbelovedHosts, AND BootManager.  To that end do also donate to defim for the combo license: DefimDonator  [$14 is well worth it] — important: make a note of the name in which you want the license issued. LightningWall does not appear to have a whitelist mode starting from everything blocked, but can function independent of your iptables manager (AFwall+).

 

(DonkeyGuard requires CydiaFramework… seems to be abandoning XposedFramework in favor, but uses both now)

DonkeyGuard has a better UI style than XPrivacy Pro

vs XPrivacy Pro

 

 

edit 2013:  better is XPrivacy extension of XPosed framework for android.  zero malware market access needed; download only via XDA forums or soon *hub for free OpenSource possibly F-droid.org “You can use an XPrivacy Pro license for all the devices you personally own.”

http://forum.xda-developers.com/showthread.php?t=2320783

XPrivacy FAQ#50 also recommends Xmpp Texting [Xabber]

.

original post:

http://forum.xda-developers.com/showthread.php?t=1357056

picks up where LBE Privacy Guard leaves off… they play well together.  However PDroid claims no need of background service.. still requires root. It requires root to boot into CWM to apply the patch, but does not require root to run the management app.

.

PDroid allows blocking access for any installed application to the following data separately:

• Device ID (IMEI/MEID/ESN)
• Subscriber ID (IMSI)
• SIM serial (ICCID)
• Phone and mailbox number
• Incoming call number
• Outgoing call number
• GPS location
• Network location
• List of accounts (including your google e-mail address)
• Account auth tokens
• Contacts
• Call logs
• Calendar
• SMS
• MMS
• Browser bookmarks and history
• System logs
• SIM info (operator, country)
• Network info (operator, country)

For device ID, phone and mailbox number, SIM serial, subscriber ID and device location it also allows supplying custom or random values.

.

easy access to APKs from memorable url: http://tinyurl.com/PrivacyDroid

PDroid 2.3.4 source; patches build, frameworks and libcore

cites interesting article on blockery leakiness.

[ Himself.wordpress.com ]

yahoo privacy policy: viewing equals consent? adblocking only opt out option?

I see… or rather opt not to see via adblocking [AdAway]

Yahoo! does not provide any personal information to the advertiser when you interact with or view a targeted ad. However, by interacting with or viewing an ad you are consenting to the possibility that the advertiser will make the assumption that you meet the targeting criteria used to display the ad.

http://info.yahoo.com/privacy/nz/yahoo/details.html

.

coming soon to a blog I own near you soon:

comparison matrix of yahoo privacy policies by int’l domain/region

.

[ Himself.wordpress.com | SagaciousHimself.stumbleupon.com ]

new English version of LBE Privacy Guard available Halloween? Renamed to LBE Security Master

edit 2014:  better alternatives to LBE

edit: a MUCH better, more elegant solution is the PDroid patch

http://forum.xda-developers.com/showthread.php?t=1357056

Ask your ROM builder to bake-in PDroid.  There are PDroid aditions and versions for ICS.  It will likely be ported to EVERY subsequent versison of android.  MY hardware, MY data: MY terms.

…

English LBE Security Master lite from LBE now available

————————————

I have been using the new LBE Security Master in Chinese.  With the exception of a few features all the functionality can be intuited based on prior app experience.

[insert: LBE PG backgrounder]

New to this version is a name change.  This better than fantastic app has been dubbed LBE Security Master.  The Guard icon is a dial whereas the Master icon is a shield.  Go figure.

While denial of permissions is an option I much prefer playing integrity challenged applications at their own game: data poisoning.

I had been working on a screen shot based tutorial but it seems that will be of little value for the Chinese-only upgrade as the English version of LBE Security Master (version 2.1.x) will be available Halloween or possibly All Souls Day.  Chinese APK.

I am hoping in addition to unique id spoofing [UDID] LBE Privacy Guard data services will also be able to spoof MAC addresses and spoof non-radio IMEI/MEID.

New must-have features include:

• new permissions visualization,
• bandwidth monitoring per app (a starred feature req of DroidWall)
• battery preservation,
• communication filtering [some twits label this sms firewall]
• fractional functionality for non-root users

Missing is finer grained control of permissions.   Some permissions such as send SMS, receive SMS are grouped into one tickbox.  GPS location and network location are deemed one permission.   ‘Get TASKS’, a permission abused by google maps, seems to be MIA as well.

The new Chinese version of LBE Privacy Guard is fully functional under Cyanogenmod 7: good news for users of non-stable releases of CM7 who are unable to use the current English version. While garbage collection frequency has been a blight for some using cm4dx the dev cm4dx-gb has almost entirely addressed the problem; LBE Security Master can increase garbage collection frequency at user request.

Keep an eye on the LBE Security Master change log and LBE dev blog for more speculation fodder.  Though big fans of QQ they are not big on XMPP.

.

[ Himself.wordpress.com | SagaciousHimself.stumbleupon.com ]

salvia – new teen hallucinogen drug menace

salvia teens using hallucinogenics to cull own population – the new chlorine for the gene pool

and don’t worry parents.. there are plenty of druggy sites to give instructions

Level – 3 “L” stands for LIGHT visionary state. Closed-eye visuals (clear imagery with eyes closed: fractal patterns, vine-like and geometric patterns, visions of objects and designs). The imagery is often two dimensional. If open-eyed visual effects occur, these are usually vague and fleeting. At this level, phenomena similar to the hypnagogic phenomena that some people experience at sleep onset occur. At this level, visions are experienced as “eye candy” but are not confused with reality.

sagewisdom.org/usersguide.html

.

what’s the solution for drug fascists?  whitelisting of course.  duh.

Please send me a check for this brilliance.  Since you people didn’t implement the simple solution to abolish all spam for all time I don’t expect the deliberately ineffective ‘war’ on drugs to adopt simplicity either.

video: what is faith

video part 1

http://massmirror.com/251573f79cfb5d63bea2fd734279c094.html

faith is not incredulity

faith is not wishful thinking

the opposite of faith is not rationalism, but superstition

an atheist does not doubt the existence of God he dismisses it

video part2

http://massmirror.com/0758ded82203ee44e64997fccab88f94.html

faith pertains to those truths that are above our senses but not contrary to them

one is NOT entitled to free medical services — slavery is bad

“Should everyone have free health care?”

Certainly not! Medical service, like having a maid service or owning a car, is a PRIVILEGE and NOT a right. One, however, is individually obligated to care for one’s own health. But one cannot enslave others performing this service nor can one expect others to perform this service without compensating them.

Socialist health care is akin to promoting slavery.

let’s let soldiers vote on orders! useful in Iraq, Iran, North Korea and other wars

let’s let soldiers vote on orders! Don’t like a strategy? Use your portable red/green thumb remote.

Why stop there?

Setup http://WAR.int
and allow real-time, global voting! That way raucous non-citizens
(especially those in other counties) can efficaciously inflict their
defective views on the United States of America…. and ultimately
control the citizenry by implementing liberalese martial law!!

Defective By Design: eliminate DRM by the power of the people (who spend the money on gizmos)

http://defectivebydesign.org/

I won’t buy ANY hardware with embedded DRM… unless I can remove- or
circumvent it. Thanks, but I don’t want a nanny state. Even China is
slowly being moved away from that mentality.

fornication is for selfish fuckers

http://www.ewtn.com/library/SOURCES/DARK-JC.TXT

14.1.(3). An angel of Satan [2 Cor. 12:7], which is the spirit of fornication, is given to some

to buffet their senses with strong and abominable temptations, and afflict their spirit with

foul thoughts and very vivid images, which sometimes is a pain worse than death for them.

communist google – we will decide the Common Good ™

http://communistgoogle.com/

What is Communist Google?
Communist Google is a website devoted to the submission of U.S.
companies to Chinese censorship and totalitarian tactics of repression.
Communist Google is a parody of Google.
We are of course in no way shape or form related to Google.

Viva La Revolucion!

Google fighting class action free speech lawsuit
http://thepeoplescube.com/red/viewtopic.php?t=774

John Corapi Faith Quiz #8

Faith Quiz #8

know the one you love

woefully misinformed about NSA practices

umm most of Ecshalon’s observations of US citizens are performed from the EU under US control.. this is how privacy concerns are averted.  And the US perfoms the same tat for UK

this guy has an interested take on the assumption there isn’t a EU equivalent:

Had a European government, instead of the Bush administration, created
the NSA’s call database, would that government be in violation of
European privacy law? I think so, for the reasons I explore below.

http://www.concurringopinions.com/archives/2006/05/the_nsa_phone_c.html

Perhaps the UK spy ward hasn’t consumed the EU yet.. but his article CERTAINLY doesn’t apply to UK

Opus Dei and corporal mortification

The Da Vinci Code makes it appear that Opus Dei members practice
bloody mortifications. In fact, though history indicates that some
Catholic saints have done so, Opus Dei members do not do this.

The Catholic Church advises people to practice mortification. The
mystery of Jesus Christ’s Passion shows that voluntary sacrifice
has a transcendent value and can bring spiritual benefits to others.
Voluntary sacrifice also brings personal spiritual benefits, enabling
one to resist the inclination to sin. For these reasons, the Church
prescribes fasting on certain days and recommends that the faithful
practice other sorts of mortification as well. Mortification is by no
means the centerpiece of the Christian life, but nobody can grow closer
to God without it: “There is no holiness without renunciation and
spiritual battle” (Catechism of the Catholic Church, n. 2015).

In the area of mortification, Opus Dei emphasizes small sacrifices
rather than extraordinary ones, in keeping with its spirit of
integrating faith with secular life. For example, Opus Dei members try
to make small sacrifices such as persevering at their work when tired,
occasionally passing up some small pleasure, or giving help to those in
need.

Some Opus Dei members also make limited use of the cilice and
discipline, types of mortification that have always had a place in the
Catholic tradition because of their symbolic reference to
Christ’s Passion. Many well-known figures in Catholic history
have used the cilice or discipline, such as St. Francis, St.
Thomas More, St. Padre Pio and Blessed Mother
Teresa.  The Church teaches that people should take
reasonable care of their physical health, and anyone with experience in
this matter knows that these practices do not injure one’s health
in any way. The Da Vinci Code’s
description of the cilice and discipline is greatly exaggerated and
distorted: it is simply not possible to injure oneself with them
as the book and film depict. 

Additional explanation from leading Catholic sources regarding Opus Dei and corporal mortification.

http://www.opusdei.org/art.php?w=32&p=7017

help stop THIS draconian act

http://www.storiesonvideo.com/cope.html

HELP PRESERVE NET FREEDOM AND STOP THE COPE ACT

Sure, Net Neutrality is essentially communist, but the internet has always been *that way* and I’d like to keep the status quo, please.