Potential malware encounter after accidently visiting typosquatting page

[Kobold]

@soundofthunder

Gamers, often choose their convenience over security, and leave their computer exposed to several potential attack vectors; uPnP being one of them.

Its not just Gamers, its the lazy mainstream people… uPNP should be deactivated per default in every router.

Enable uPNP is like, hey bro do you want to get attacked from all sides, just activate it and archive the ultimate experience

[soundofthunder]

@Mirdarthos

It always amuses me that this is the most general thing and that they can’t really see that anyone would not be using something different.

Gibson’s testing features are mostly OS-agnostic, but still, it’s amusing that after so many years nobody thought to change the wording in the script.

@Kobold

Enable uPNP is like, hey bro do you want to get attacked from all sides

Yes, it’s like painting a big red target on your butt.

[Mirdarthos]

I get that, really I do. In this regard, I mean it in general, not them specifically.

[soundofthunder]

@Mirdarthos

I mean it in general, not them specifically.

Yes, I got that.

[growler]

What is your opinion about using the Firejail sandbox?
Alt+F2 → firejail firefox

[soundofthunder]

@growler

What is your opinion about using the Firejail sandbox?

I have none; I have never used it.

I remember wanting to check it out at one time, but then I forgot about it. I remembered again, later, and then forgot again.

[Locutus]

@Ben

@marinheiro

Or do you use a big paper file?

Just ONE paper to remind you of one or two gatekeeper passwords is the most I ever needed…

Password managers and authentication do the rest.

For TRIVIAL websites, then just go with a duckduckgo password@duck.com (forwards to your regular email account).

You mean to tell me that it doesn’t work this way?

That's Not How This Works!!

[bedna]

@Kobold

Tracking/Privacy but that also can lead to stolen other information…

I think you have missunderstood that. “private” mode does not block anything, it just does not SAVE anything when closing the browser. When you are running firefox, the same cookies and tracking is done as if you were “non private”.
It is “private” against other users of the computer IF you close the browser between, they will not be able to see the history of what you did in the browser.

Blocking is only done with plugins, and that is why I pointed out to make sure they are actually used in “private” mode.

Edit
I made a new firefox profile (I recommend everybody to do anyway, don’t use the dafault) and installed ublock origin.
It is NOT used in “private windows” by default. I think that is basically the standard for ALL plugins.

[Kobold]

@bedna

It is NOT used in “private windows” by default. I think that is basically the standard for ALL plugins.

As far i know, this is not the standard for ALL plugins… but maybe my memories are wrong.

[cscs]

I cannot recall if there is a difference, or if they are always disabled on private by default.

But I might add to these suggestions by pointing out one should disable DoH (DNS over HTTPS) to have firefox respect your DNS and /etc/hosts configurations.

(that is your DNS server settings [can include VPN], and any blocking in hosts such as from hblock)

[soundofthunder]

Only from my experience, every extension installed in Firefox defaults to ‘Don’t Allow’. This wasn’t always the case.

Before the introduction of the newer WebExtensions API, the default could be toggled with allowPrivateBrowsingByDefault.

Sadly, no more; it seems manual selection is currently the only option.

• Remove extensions.allowPrivateBrowsingByDefault preference
• These Weeks in Firefox: Issue 96