nickbearded

Can stock #Firefox match #LibreWolf levels? Yes, with the right tweaks! 🛡️

Tested on #BashCoreGee: added uBlock Origin, Privacy Badger, and enabled Strict Privacy + Quad9 DoH. Result? #PiHole is now silent! 🤐

uBlock stops threats at the source (Layer 7), so packets never even reach the gateway. This is Layered Defense: Pi-Gateway + VPN + Hardened Browser.

Gee keeps Firefox stock for user choice, but the tools to harden it are right there.

#Privacy #Linux #CyberSecurity #SelfHosted #OS #Debian

6:18pmWeb
Show threadBruce Simpson, Ph.D.10h ago
@nickbearded why is it so difficult to find Mozilla XPCOM developer documentation now. I'm not looking to roll extensions, I want to understand Firefox's internal object brokerage. bzzt, dropping the token on that, next stop: DBus
Show threadnickbearded1h ago
@bms48 Haha, diving into XPCOM is a path to madness! Mozilla has been burying those docs for years. Switching to DBus sounds like a much saner way to spend a weekend 😅👍🏻
Show threadgary10h ago
@nickbearded it is really the only reasonable way to go, the civilized way, plus you get lots of log info, no dns leaks (which is a good selling point) I'd like to see you align with an os so people get a good experience - maybe so a mini and a maxi damn small linux and kali everything versions #bash core overhead #network stack #make menuconfig
Show threadnickbearded1h ago
@gary_alderson Thanks for the comment! I didn’t know about FreedomBox before, but I took a look and it’s definitely an interesting project!
Show threadgary44m ago
@nickbearded 10-4 - you may like it, has the right sw philosophy but exactly how much different from debian it actually is will leave it up to you, i have to revisit it, if nvme prices ever drop i will jump back on that train. I like that you are chaining together the best apps, this it great for newbies but also smb sector
Show threadThomas9h ago
@nickbearded Surely running DOH in Firefox would bypass the pihole.
Show threadnickbearded1h ago
@tripplehelix Spot on! DoH encrypts queries, so they do bypass Pi-hole’s visibility.
​In this setup, it's a deliberate choice: #uBlockOrigin handles the heavy lifting at the browser level (Layer 7), while DoH ensures my ISP can't snoop on the browser's DNS.
​Pi-hole remains the essential 'safety net' for the OS, background services, and all #IoT devices that don't support DoH. It’s all about layered security!