The threat model is, IMO, pretty clearly defined. One of the things I configured in Firefox, is to disable WebRTC. To test your setup on your browser, try. Also, I recommend the addon Dark Reader and the feature Reader Mode. For websites you regularly use, you can save the temporary changes, or just not use such bloated websites. However it is more user-friendly than NoScript ever was. I use uMatrix, Cookie AutoDelete, Smart Referer, Privacy Badger, Decentraleyes, HTTPS Everywhere, containers for Amazon/Facebook/Google (would like to add Microsoft), CanvasBlocker, Tracking Token Stripper, Forget Me Not, Terms of Service Didn’t Read, and Buster: Captcha Solver for Humans. uBlock Origin (mainly to manually block 'you are blocking ads' notices).

On Android, I don't use a layer 7 firewall which is my bad.įor browser, on every OS I use a configured Firefox (which I did NOT document my bad!) with a bunch of addons. I don't use Windows, but if I would I'd at least remove all the tracking stuff (for example with O&O ShutUp). On each individual client device I also use a layer 7 firewall ('personal firewall'). My partner sees barely any ads at home due to this setup (I did not bother to setup WireGuard on her smartphone as of yet). It also works on say a smart TV or an official Android device (I use a rooted Android device with microG which doesn't implement GAds). It does add a little bit of latency, but I don't mind, as it also increases my privacy on the insecure link. I'm using an EdgeRouter Lite for that purpose. I forward it to Unbound which uses DNSSEC and DNSCrypt. I use Pi-Hole plus WireGuard to route all my devices through my home broadband connection (so even on a hotel/train WiFi, when on LTE, etc).

Why? Because some devices/apps will circumvent one of these layers one way or another.

Recaptcha bypass tempermonkey script