Jump to content

LinuxLite


 Share

Recommended Posts

12 hours ago, Sampei.Nihira said:

Chrome://flags - Enabled:

  1. Block scripts loaded via document.write
  2. Strict Extension Isolation
  3. Strict-Origin-Isolation

 

That is awesome!

I plan to set some security relate flags (including those 3 and others) myself over the next few days, but I'm still learning and trying to find balance between security / privacy and speed. Its too bad, but FF is becoming less-and-less usable in the new age.

Thank you and hope all is well :)

Edited by XPerceniol
Link to comment
Share on other sites


  • 2 weeks later...

Xubuntu 21.10 (PC my daughter)
Strong password enabled
Quad9 DNS
UFW Firewall - enabled

Google Chrome --disable-webgl --cipher-suite-blacklist=0x0035,0x002f,0xc014,0xc013

  • Javascript blocked for HTTP://*
  • Privacy Sandbox + FLoc disabled
  • Clears cookies and data from sites when you close
  • Search Engine and Home web-page DuckDuckGo
  • Always HTTPS
  • DNT enabled

Chrome://flags - Enabled:

  • Block scripts loaded via document.write
  • Strict Extension Isolation
  • Strict-Origin-Isolation
  • HTTPS-First Mode Setting
  • Privacy Review
  • Smooth Scrolling
  • Parallel downloading
  • Reduce User-Agent request header


Extensions:

  • UBO - Hard Mode - with TLD by Kees1958
  • Decentraleyes
  • Trace - (Only enabled) - Google Header Removal + Alternate Error Page + Webform Autofill + SafeBrowsing Extended Reporting
  • Stream Recorder
  • VideoDownloadHelper

I eliminated the 4 categories of insecure chipher suites TLS 1.0/1.1/1.2
I removed the flag "Anonymize local IPs exposed by WebRTC" because it is not necessary.

  • Like 2
Link to comment
Share on other sites

On 11/22/2021 at 10:05 PM, XPerceniol said:

I'm going to be trying out some more linux builds this week in search of something that I can use on this old junker here as I'm looking to dual-boot or perhaps even keep acronis ... we'll see as I don't really need that partition - my version IS a live DVD. 

Searching for 32bit live DVD's try before I make my choice. 

Any ideas are appreicated. I have lots of "Bright Ideads" but I don't know that is such a good thing. Ha!

From 100+ Linux distros available I have only tried around 10.


My favorite for now is Puppy Linux Tahrpup 6.0.5:
http://ftp.nluug.nl/ftp/pub/os/Linux/distr/puppylinux/puppy-tahr/iso/tahrpup -6.0-CE/tahr-6.0.5_PAE.iso   (205 MB)

Screens:
puppy-connect_01.jpg
Puppy-Linux-Review-OS.png

You can put it on CD or USB and boot from it.
It installs into RAM Memory and works very fast.
Has a cute background image.

Some of the pre-installed programs:
Pale Moon 25.8.1 - default browser, opens most sites, can’t open YouTube; If you want another browser you need to install it additionally
VLC media player 2.1.6
IRC HexChat 2.10.2
GParted 0.16.1 (partition manager)
Burniso2cd (burn ISO to CD)
Screeny Capture (screenshot)

quickpet - can easily install many other programs like Steam, Chrome, Firefox, guvcview for your camera, download and install is automatic


Other recommended Linux distros that I haven't tried yet:
Peppermint OS
Linux Lite
MX Linux
Slax
Zorin OS Lite
Bodhi Linux
Sparky Linux
Tiny Core Linux
Linux Mint
Manjaro Linux
Tinycore
LXLE
AntiX Linux
Alpine
Arch Linux
Q4OS
EasyOS
Salix OS

  • Like 2
Link to comment
Share on other sites

  • 3 months later...
On 1/28/2022 at 8:03 AM, we3fan said:

From 100+ Linux distros available I have only tried around 10.


My favorite for now is Puppy Linux Tahrpup 6.0.5:
http://ftp.nluug.nl/ftp/pub/os/Linux/distr/puppylinux/puppy-tahr/iso/tahrpup -6.0-CE/tahr-6.0.5_PAE.iso   (205 MB)

Screens:
puppy-connect_01.jpg
Puppy-Linux-Review-OS.png

You can put it on CD or USB and boot from it.
It installs into RAM Memory and works very fast.
Has a cute background image.

Some of the pre-installed programs:
Pale Moon 25.8.1 - default browser, opens most sites, can’t open YouTube; If you want another browser you need to install it additionally
VLC media player 2.1.6
IRC HexChat 2.10.2
GParted 0.16.1 (partition manager)
Burniso2cd (burn ISO to CD)
Screeny Capture (screenshot)

quickpet - can easily install many other programs like Steam, Chrome, Firefox, guvcview for your camera, download and install is automatic


Other recommended Linux distros that I haven't tried yet:
Peppermint OS
Linux Lite
MX Linux
Slax
Zorin OS Lite
Bodhi Linux
Sparky Linux
Tiny Core Linux
Linux Mint
Manjaro Linux
Tinycore
LXLE
AntiX Linux
Alpine
Arch Linux
Q4OS
EasyOS
Salix OS

I'm sorry, I somehow missed your reply - thank you very much. For me, Peppermint OS and Zorin OS Are quite good. Manjaro was terrible IMO. For now, I only go with live sessions and remain with XP for the time being and use ArcticFoxie 360 Chrome and Roytam's Serpent and will hang in there as long as possible. Will likely keep XP even if online browsing becomes minimal and we'll see at that point what is the best option. Still not sure, actually.

Just FYI..

Linux Lite has ditched FF and went with google chrome as their default browser

https://betanews.com/2022/04/25/linux-lite-6-0-rc1-google-chrome

If you need - V5.8 64 Bit https://osdn.net/projects/linuxlite/storage/5.8/ still uses FF.

Edited by XPerceniol
Link to comment
Share on other sites

I had missed this answer of yours.....is the age

I had to update the configuration in my daughter's pc.
The pc will move permanently (sigh!!) to my daughter's house, next saturday.

This configuration allows for excellent usability and provides good protection:

Xubuntu 22.04 LTS
Strong password enabled
Software Updates - LTS version notification
Quad9 DNS
UFW Firewall - enabled

Google Chrome --disable-webgl --cipher-suite-blacklist=0x0035,0x002f,0xc014,0xc013

  • Javascript blocked for HTTP://*
  • Privacy Sandbox - disabled
  • Third party cookies enabled
  • Clears cookies and data from sites when you close
  • Secure DNS - DOH Quad9
  • Search Engine and Home web-page DuckDuckGo
  • Always HTTPS

Chrome://flags - Enabled:

  • Block scripts loaded via document.write
  • Strict-Origin-Isolation
  • Parallel downloading
  • Reduce User-Agent request header
  • Enable CSS Container Queries
  • Disable subframe process reuse

Extensions:

  • Speed Dial [FVD]
  • Stream Recorder
  • VideoDownloadHelper
  • Don't add custom search engines
  • Decentraleyes
  • Ublock Origin in Hard Mode - with TLD by Kees1958:

* * 3p block
* * 3p-frame block
* * 3p-script block
* com * noop
* edu * noop
* eu * noop
* gov * noop
* inf * noop
* io * noop
* it * noop
* net * noop
* org * noop

 

Linux.png

  • Like 1
Link to comment
Share on other sites

On 4/28/2022 at 9:35 PM, XPerceniol said:

I'm sorry, I somehow missed your reply - thank you very much. For me, Peppermint OS and Zorin OS Are quite good. Manjaro was terrible IMO. For now, I only go with live sessions and remain with XP for the time being and use ArcticFoxie 360 Chrome and Roytam's Serpent and will hang in there as long as possible. Will likely keep XP even if online browsing becomes minimal and we'll see at that point what is the best option. Still not sure, actually.

Just FYI..

Linux Lite has ditched FF and went with google chrome as their default browser

https://betanews.com/2022/04/25/linux-lite-6-0-rc1-google-chrome

If you need - V5.8 64 Bit https://osdn.net/projects/linuxlite/storage/5.8/ still uses FF.

Snap would not be a good reason.
Besides, you can install FF as a Deb package.

Probably a good reason would be what is written in the article below:

https://madaidans-insecurities.github.io/firefox-chromium.html

  • Like 1
Link to comment
Share on other sites

  • 2 weeks later...

Don't feel bad .. I also missed your reply.

Thank you for the helpful advice, as always.

From the main site you linked:

https://madaidans-insecurities.github.io/browser-tracking.html

 

Quote

Additionally, just disabling JavaScript, while preventing large vectors for fingerprinting, does not prevent fingerprinting entirely. Fingerprinting can be done with only CSS and HTML. One example is using @media rules to figure out your browser resolution.

You also cannot substantially improve security by configuring the browser. Changing a few settings will not fix deep architectural security issues. You can at most reduce some attack surface by disabling things, but most people don't do this to an extent where it actually matters.

Just UGH :(

Edited by XPerceniol
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.


×
×
  • Create New...