diff --git a/i18n/ar/browser-extensions.md b/i18n/ar/browser-extensions.md index 2a6b11f2..88d1edd7 100644 --- a/i18n/ar/browser-extensions.md +++ b/i18n/ar/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/ar/data-broker-removals.md b/i18n/ar/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/ar/data-broker-removals.md +++ b/i18n/ar/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/ar/desktop-browsers.md b/i18n/ar/desktop-browsers.md index f3f12ca3..9499f941 100644 --- a/i18n/ar/desktop-browsers.md +++ b/i18n/ar/desktop-browsers.md @@ -179,9 +179,11 @@ Firefox يوفّر إعدادات قوية لحماية الخصوصية، مث ##### إرسال بيانات الاستخدام -- [ ] أزل التحديد عن **السماح لـ Firefox بإرسال البيانات الفنية وبيانات التفاعل إلى Mozilla** -- [ ] قم بإيقاف خيار **السماح لـ Firefox بتجربة ميزات تجريبية (دراسات)** -- وفقا لسياسة الخصوصية الخاصة بـ Firefox من Mozilla، +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** وفقا لسياسة الخصوصية الخاصة بـ Firefox من Mozilla، @@ -225,7 +227,7 @@ Firefox يوفّر إعدادات قوية لحماية الخصوصية، مث
-مشروع [Arkenfox](https://github.com/arkenfox/user.js) يقدّم إعدادات محسّنة ومختارة بعناية لتعزيز الخصوصية في متصفح Firefox. إذا [قررت](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) استخدام Arkenfox، فبعض [الإعدادات](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) قد تكون صارمة من وجهة نظر البعض، وقد تتسبب في عدم عمل بعض المواقع بشكل صحيح — لكن يمكنك [تعديلها بسهولة](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) لتناسب احتياجاتك.  ننصحك **بشدة** بتصفّح كامل محتوى [صفحة الويكي الخاصة بهم](https://github.com/arkenfox/user.js/wiki). يدعم Arkenfox كذلك ميزة [الحاويات](https://support.mozilla.org/kb/containers#w_for-advanced-users) في Firefox. +مشروع [Arkenfox](https://github.com/arkenfox/user.js) يقدّم إعدادات محسّنة ومختارة بعناية لتعزيز الخصوصية في متصفح Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs.  ننصحك **بشدة** بتصفّح كامل محتوى [صفحة الويكي الخاصة بهم](https://github.com/arkenfox/user.js/wiki). يدعم Arkenfox كذلك ميزة [الحاويات](https://support.mozilla.org/kb/containers#w_for-advanced-users) في Firefox. يركز Arkenfox على منع أساليب التتبع البسيطة، من خلال ميزة "عشوائية الرسم" (canvas randomization) — وهي تقنية تغيّر طريقة عرض الصور داخل صفحات الويب بشكل طفيف، بحيث يصعب على المواقع استخدام تلك الرسومات كوسيلة لتتبّعك — بالإضافة إلى إعدادات Firefox المدمجة لمقاومة تتبّع البصمة. على عكس Mullvad وTor، لا يسعى Arkenfox لجعل متصفحك يشبه متصفحات الآخرين، وهي الطريقة الوحيدة تقريبا لمنع التتبع المتقدم ببصمة المتصفح. تذكر أنه يمكنك دائمًا استخدام أكثر من متصفح. على سبيل المثال، يمكنك استخدام Firefox مع Arkenfox لبعض المواقع التي تثق بها أو تحتاج إلى البقاء مسجل الدخول فيها، واستخدام متصفح Mullvad لباقي استخداماتك اليومية. diff --git a/i18n/ar/encryption.md b/i18n/ar/encryption.md index 638be4e2..bcbfca1e 100644 --- a/i18n/ar/encryption.md +++ b/i18n/ar/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/ar/frontends.md b/i18n/ar/frontends.md index 6902987f..d23989f3 100644 --- a/i18n/ar/frontends.md +++ b/i18n/ar/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

تنوية

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/ar/tools.md b/i18n/ar/tools.md index fbba2bcf..2a498401 100644 --- a/i18n/ar/tools.md +++ b/i18n/ar/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/bn-IN/browser-extensions.md b/i18n/bn-IN/browser-extensions.md index 2a6b11f2..88d1edd7 100644 --- a/i18n/bn-IN/browser-extensions.md +++ b/i18n/bn-IN/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/bn-IN/data-broker-removals.md b/i18n/bn-IN/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/bn-IN/data-broker-removals.md +++ b/i18n/bn-IN/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/bn-IN/desktop-browsers.md b/i18n/bn-IN/desktop-browsers.md index 894d9d65..22cfd748 100644 --- a/i18n/bn-IN/desktop-browsers.md +++ b/i18n/bn-IN/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/bn-IN/encryption.md b/i18n/bn-IN/encryption.md index 638be4e2..bcbfca1e 100644 --- a/i18n/bn-IN/encryption.md +++ b/i18n/bn-IN/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/bn-IN/frontends.md b/i18n/bn-IN/frontends.md index 8dd6acc9..1b9b0a83 100644 --- a/i18n/bn-IN/frontends.md +++ b/i18n/bn-IN/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/bn-IN/tools.md b/i18n/bn-IN/tools.md index 076f3012..06858ee4 100644 --- a/i18n/bn-IN/tools.md +++ b/i18n/bn-IN/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/bn/browser-extensions.md b/i18n/bn/browser-extensions.md index 2a6b11f2..88d1edd7 100644 --- a/i18n/bn/browser-extensions.md +++ b/i18n/bn/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/bn/data-broker-removals.md b/i18n/bn/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/bn/data-broker-removals.md +++ b/i18n/bn/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/bn/desktop-browsers.md b/i18n/bn/desktop-browsers.md index 894d9d65..22cfd748 100644 --- a/i18n/bn/desktop-browsers.md +++ b/i18n/bn/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/bn/encryption.md b/i18n/bn/encryption.md index 638be4e2..bcbfca1e 100644 --- a/i18n/bn/encryption.md +++ b/i18n/bn/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/bn/frontends.md b/i18n/bn/frontends.md index 8dd6acc9..1b9b0a83 100644 --- a/i18n/bn/frontends.md +++ b/i18n/bn/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/bn/tools.md b/i18n/bn/tools.md index 076f3012..06858ee4 100644 --- a/i18n/bn/tools.md +++ b/i18n/bn/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/cs/browser-extensions.md b/i18n/cs/browser-extensions.md index 2a6b11f2..88d1edd7 100644 --- a/i18n/cs/browser-extensions.md +++ b/i18n/cs/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/cs/data-broker-removals.md b/i18n/cs/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/cs/data-broker-removals.md +++ b/i18n/cs/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/cs/desktop-browsers.md b/i18n/cs/desktop-browsers.md index e66c21ce..b5534113 100644 --- a/i18n/cs/desktop-browsers.md +++ b/i18n/cs/desktop-browsers.md @@ -181,9 +181,11 @@ Toto nastavení vás ochrání před trvalými cookies, ale neochrání vás př ##### Telemetrie -- [ ] Odšrtněte **Odesílat technická data a data o interakcích organizaci Mozilla** -- [ ] Odškrtněte **Instalovat a spouštět studie** -- [ ] Odškrtněte **Automaticky odesílat hlášení o pádech** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** Prohlášení o ochraně osobních údajů pro Firefox uvádí: @@ -227,7 +229,7 @@ Maximální ochrana vynucuje používání DNS over HTTPS. Pokud se Firefox nebu
-[Projekt Arkenfox](https://github.com/arkenfox/user.js) nabízí sadu pečlivě zvážených funkcí Firefoxu. Pokud se [rozhodnete](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) Arkenfox používat, [několik nastavení](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) může být subjektivně moc přísných anebo mohou způsobit, že webové stránky nebudou fungovat správně – můžete je ale [jednoduše upravit](https://github.com/arkenfox/user.js/wiki/3.1-Overrides), aby vyhovovaly vašim potřebám. **Velmi doporučujeme**, abyste si prošli celou jejich [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox také umožňuje podporu [kontejnerů](https://support.mozilla.org/kb/containers#w_for-advanced-users). +[Projekt Arkenfox](https://github.com/arkenfox/user.js) nabízí sadu pečlivě zvážených funkcí Firefoxu. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. **Velmi doporučujeme**, abyste si prošli celou jejich [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox také umožňuje podporu [kontejnerů](https://support.mozilla.org/kb/containers#w_for-advanced-users). Arkenfox se zaměřuje pouze na zabránění běžným nebo naivním sledovacím skriptům skrz randomizaci canvasu nebo skrz vestavěnou konfiguraci odolnosti proti otiskům. Jeho cílem není, aby váš prohlížeč splynul s velkým davem ostatních uživatelů Arkenfoxu tak, jako to dělá Mullvad Browser nebo Tor Browser, což je jediný způsob, jak sabotovat pokročilé skripty založené na sledování otisků. Nezapomeňte, že vždy můžete používat více prohlížečů. Můžete například zvážit používání Firefoxu + Arkenfoxu pro pár stránek, kde chcete být přihlášení nebo jim věříte, a Mullvad Browser pro běžné prohlížení. diff --git a/i18n/cs/encryption.md b/i18n/cs/encryption.md index befdcc5c..02c149d2 100644 --- a/i18n/cs/encryption.md +++ b/i18n/cs/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/cs/frontends.md b/i18n/cs/frontends.md index 9e667c34..8427cc38 100644 --- a/i18n/cs/frontends.md +++ b/i18n/cs/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Varování

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/cs/tools.md b/i18n/cs/tools.md index 2202b3ee..e042888b 100644 --- a/i18n/cs/tools.md +++ b/i18n/cs/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/de/browser-extensions.md b/i18n/de/browser-extensions.md index 52bfe68f..372877f9 100644 --- a/i18n/de/browser-extensions.md +++ b/i18n/de/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Zusätzliche Filterlisten verlangsamen die Arbeit und können die Angriffsfläch - Muss sich direkt auf die Privatsphäre der Nutzer auswirken, d. h. es dürfen nicht einfach nur Informationen geliefert werden. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/de/data-broker-removals.md b/i18n/de/data-broker-removals.md index c2f789d9..48c97cac 100644 --- a/i18n/de/data-broker-removals.md +++ b/i18n/de/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/de/desktop-browsers.md b/i18n/de/desktop-browsers.md index 98a8d5f5..e87edeee 100644 --- a/i18n/de/desktop-browsers.md +++ b/i18n/de/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetrie -- [ ] Deaktiviere **Firefox erlauben, Daten zu technischen Details und Interaktionen an Mozilla zu senden** -- [ ] Deaktiviere **Firefox das Installieren und Durchführen von Studien erlauben** -- [ ] Deaktiviere **Nicht gesendete Absturzberichte automatisch von Firefox senden lassen** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** Laut Mozillas Datenschutzrichtlinie für Firefox, @@ -227,7 +229,7 @@ Maximaler Schutz erzwingt die Verwendung von DNS over HTTPS, und es wird eine Si
-Das [Arkenfox-Projekt](https://github.com/arkenfox/user.js) bietet eine Reihe von sorgfältig durchdachten Optionen für Firefox. Wenn du dich für Arkenfox **entscheidest**, sind [einige Optionen](https://github.com/arkenfox/user.js/wiki) subjektiv streng und/oder können dazu führen, dass einige Websites nicht ordnungsgemäß funktionieren. Dies kann jedoch <2>leicht angepasst werden, um deinen Bedürfnissen zu entsprechen. Wir [empfehlen dringend](https://support.mozilla.org/kb/containers#w_for-advanced-users), das gesamte <1>Wiki zu lesen. Arkenfox ermöglicht auch die Unterstützung von [Containern](https://support.mozilla.org/kb/containers#w_for-advanced-users). +Das [Arkenfox-Projekt](https://github.com/arkenfox/user.js) bietet eine Reihe von sorgfältig durchdachten Optionen für Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. Wir [empfehlen dringend](https://support.mozilla.org/kb/containers#w_for-advanced-users), das gesamte <1>Wiki zu lesen. Arkenfox ermöglicht auch die Unterstützung von [Containern](https://support.mozilla.org/kb/containers#w_for-advanced-users). Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/de/encryption.md b/i18n/de/encryption.md index 591ff7a2..8af086c7 100644 --- a/i18n/de/encryption.md +++ b/i18n/de/encryption.md @@ -96,6 +96,14 @@ TrueCrypt wurde bereits [mehrfach geprüft](https://en.wikipedia.org/wiki/TrueCr Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Aktivieren von BitLocker unter Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tipp

- -Sichere die Datei `BitLocker-Recovery-Key.txt` auf deinem Desktop auf einem separaten Speichergerät. Der Verlust dieses Wiederherstellungscodes kann zu Datenverlust führen. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/de/frontends.md b/i18n/de/frontends.md index b5d16317..339bb4c6 100644 --- a/i18n/de/frontends.md +++ b/i18n/de/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warnung

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/de/tools.md b/i18n/de/tools.md index 75eece64..7d7ff7ec 100644 --- a/i18n/de/tools.md +++ b/i18n/de/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/el/browser-extensions.md b/i18n/el/browser-extensions.md index 2a6b11f2..88d1edd7 100644 --- a/i18n/el/browser-extensions.md +++ b/i18n/el/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/el/data-broker-removals.md b/i18n/el/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/el/data-broker-removals.md +++ b/i18n/el/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/el/desktop-browsers.md b/i18n/el/desktop-browsers.md index cb334a53..52e6df22 100644 --- a/i18n/el/desktop-browsers.md +++ b/i18n/el/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/el/encryption.md b/i18n/el/encryption.md index b277bcf4..09839755 100644 --- a/i18n/el/encryption.md +++ b/i18n/el/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Συμβουλή

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/el/frontends.md b/i18n/el/frontends.md index 8494823e..6aae7499 100644 --- a/i18n/el/frontends.md +++ b/i18n/el/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/el/tools.md b/i18n/el/tools.md index b2ba3b8b..05c1119f 100644 --- a/i18n/el/tools.md +++ b/i18n/el/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/eo/browser-extensions.md b/i18n/eo/browser-extensions.md index 2a6b11f2..88d1edd7 100644 --- a/i18n/eo/browser-extensions.md +++ b/i18n/eo/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/eo/data-broker-removals.md b/i18n/eo/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/eo/data-broker-removals.md +++ b/i18n/eo/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/eo/desktop-browsers.md b/i18n/eo/desktop-browsers.md index 894d9d65..22cfd748 100644 --- a/i18n/eo/desktop-browsers.md +++ b/i18n/eo/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/eo/encryption.md b/i18n/eo/encryption.md index 72ff9748..6bd9233c 100644 --- a/i18n/eo/encryption.md +++ b/i18n/eo/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/eo/frontends.md b/i18n/eo/frontends.md index 8dd6acc9..1b9b0a83 100644 --- a/i18n/eo/frontends.md +++ b/i18n/eo/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/eo/tools.md b/i18n/eo/tools.md index 076f3012..06858ee4 100644 --- a/i18n/eo/tools.md +++ b/i18n/eo/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/es/browser-extensions.md b/i18n/es/browser-extensions.md index 8ee5e124..a3e4dcc7 100644 --- a/i18n/es/browser-extensions.md +++ b/i18n/es/browser-extensions.md @@ -50,11 +50,11 @@ Estas son algunas otras [listas de filtros](https://github.com/gorhill/uBlock/wi ### uBlock Origin Lite -uBlock Origin también tiene una versión "Lite" de su extensión, que ofrece un conjunto de características muy limitado en comparación con la extensión original. Sin embargo, tiene algunas ventajas distintas sobre su hermana de pleno derecho, así que puede que quieras considerarlo si... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. Sin embargo, tiene algunas ventajas distintas sobre su hermana de pleno derecho, así que puede que quieras considerarlo si... - ...no quieres conceder permisos completos para "leer/modificar datos del sitio web" a ninguna extensión (incluso una de confianza como uBlock Origin) - ...quieres un bloqueador de contenidos[^1] más eficiente en cuanto a recursos (memoria/CPU) -- ...tu navegador solo soporta extensiones Manifest V3 +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin también tiene una versión "Lite" de su extensión, que ofrece un
-Solo recomendamos esta versión de uBlock Origin si nunca quieres hacer cambios en tus listas de filtros, porque solo soporta unas pocas listas preseleccionadas y no ofrece opciones de personalización adicionales, incluyendo la capacidad de seleccionar elementos para bloquear manualmente. Estas restricciones se deben a limitaciones en el diseño de Manifest V3. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] Esta versión ofrece tres niveles de bloqueo: "Básico" funciona sin requerir ningún privilegio especial para ver y modificar el contenido del sitio, mientras que los niveles "Óptimo" y "Completo" sí requieren ese amplio permiso, pero ofrecen una mejor experiencia de filtrado con reglas cosméticas adicionales e inyecciones de scriptlet. @@ -88,7 +88,7 @@ uBlock Origin Lite solo recibe actualizaciones de la lista de bloqueos cada vez ### AdGuard -Recomendamos [Safari](mobile-browsers.md#safari-ios) para los usuarios de iOS, que lamentablemente no es compatible con uBlock Origin. Por suerte, AdGuard ofrece una alternativa adecuada: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Por suerte, AdGuard ofrece una alternativa adecuada:
@@ -118,3 +118,7 @@ Las listas de filtros adicionales ralentizan las cosas y pueden aumentar su supe - Debe afectar directamente a la privacidad del usuario, es decir, no debe limitarse a proporcionar información. [^1]: uBlock Origin Lite _en sí mismo_ no consumirá recursos, ya que utiliza API más recientes que hacen que el navegador procese las listas de filtros de forma nativa, en lugar de ejecutar código JavaScript dentro de la extensión para gestionar el filtrado. Sin embargo, esta ventaja de recursos es solo [teórica](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), porque es posible que el código de filtrado estándar de uBlock Origin sea más eficiente que el código de filtrado nativo de tu navegador. Aún no se ha realizado una evaluación comparativa de esto. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/es/data-broker-removals.md b/i18n/es/data-broker-removals.md index 563b2c21..9d748593 100644 --- a/i18n/es/data-broker-removals.md +++ b/i18n/es/data-broker-removals.md @@ -32,7 +32,6 @@ Primero deberías buscar tu información en estos sitios y enviar una solicitud - BeenVerified ([Buscar](https://beenverified.com/app/optout/search), [Darse de baja](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Buscar](https://checkpeople.com/do-not-sell-info), selecciona _Remove Record_ para darte de baja) - ClustrMaps ([Buscar](https://clustrmaps.com), [Darse de baja](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Buscar](https://dataveria.com), [Darse de baja](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Buscar](https://infotracer.com), [Darse de baja](https://infotracer.com/optout)) - Intelius ([Buscar](https://intelius.com), [Darse de baja(https://suppression.peopleconnect.us/login)) - PeekYou ([Buscar](https://peekyou.com), [Darse de baja](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/es/desktop-browsers.md b/i18n/es/desktop-browsers.md index 3689a1c1..f6861614 100644 --- a/i18n/es/desktop-browsers.md +++ b/i18n/es/desktop-browsers.md @@ -181,9 +181,11 @@ Esto te protege de las cookies persistentes, pero no te protege de las cookies a ##### Telemetría -- [ ] Desmarca **Enviar datos técnicos y de interacción a Mozilla** -- [ ] Desmarca **Instalar y ejecutar estudios** -- [ ] Desmarca **Enviar automáticamente informes de fallos** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** Según la política de privacidad de Mozilla para Firefox, @@ -227,7 +229,7 @@ La Protección Máxima impone el uso de DNS sobre HTTPS y una advertencia de seg
-El [proyecto Arkenfox](https://github.com/arkenfox/user.js) proporciona un conjunto de opciones cuidadosamente consideradas para Firefox. Si [decides](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) utilizar Arkenfox, unas [pocas opciones](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) son subjetivamente estrictas y/o pueden hacer que algunos sitios web no funcionen correctamente ―lo cual puedes [cambiar fácilmente](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) para adaptarlo a tus necesidades―. **Recomendamos encarecidamente** leer su [wiki](https://github.com/arkenfox/user.js/wiki) completa. Arkenfox también es compatible con [contenedores](https://support.mozilla.org/kb/containers#w_for-advanced-users). +El [proyecto Arkenfox](https://github.com/arkenfox/user.js) proporciona un conjunto de opciones cuidadosamente consideradas para Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. **Recomendamos encarecidamente** leer su [wiki](https://github.com/arkenfox/user.js/wiki) completa. Arkenfox también es compatible con [contenedores](https://support.mozilla.org/kb/containers#w_for-advanced-users). Arkenfox solo pretende neutralizar los scripts de rastreo básicos o ingenuos mediante la aleatorización del lienzo y los ajustes de configuración de resistencia al fingerprint incorporados en Firefox. No pretende hacer que tu navegador se mezcle con una gran multitud de otros usuarios de Arkenfox de la misma manera que lo hacen Mullvad Browser o Tor Browser, que es la única manera de neutralizar los scripts avanzados de rastreo de huellas digitales. Recuerda que siempre puedes utilizar varios navegadores, por ejemplo, podrías considerar utilizar Firefox+Arkenfox para algunos sitios en los que quieras mantener la sesión iniciada o en los que confíes, y Mullvad Browser para la navegación general. diff --git a/i18n/es/encryption.md b/i18n/es/encryption.md index 21c9ef09..5fffd8fd 100644 --- a/i18n/es/encryption.md +++ b/i18n/es/encryption.md @@ -96,6 +96,14 @@ TrueCrypt ha sido [auditada varias veces](https://en.wikipedia.org/wiki/TrueCryp Las soluciones de cifrado integradas en el sistema operativo suelen aprovechar las características de seguridad del hardware, como un [criptoprocesador seguro](basics/hardware.md#tpmsecure-cryptoprocessor). Por lo tanto, le recomendamos que utilice las soluciones de cifrado integradas en su sistema operativo. Para el cifrado multiplataforma, seguimos recomendando [las herramientas multiplataforma](#multi-platform) por su mayor flexibilidad y para evitar la dependencia del proveedor. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Las soluciones de cifrado integradas en el sistema operativo suelen aprovechar l
-BitLocker es [compatible oficialmente](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) con las ediciones Pro, Enterprise y Education de Windows. Puede activarse en las ediciones Home siempre que cumplan los siguientes requisitos previos. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Activar BitLocker en Windows Home - -Para habilitar BitLocker en las ediciones "Home" de Windows, debe tener particiones formateadas con una [Tabla de Particiones GUID](https://en.wikipedia.org/wiki/GUID_Partition_Table) y disponer de un módulo TPM dedicado (v1.2, 2.0+). Es posible que tenga que [desactivar la funcionalidad que no es de Bitlocker "Cifrado del dispositivo"](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (que es inferior, ya que envía su clave de recuperación a los servidores de Microsoft) si ya está habilitada en su dispositivo antes de seguir esta guía. - -1. Abra un símbolo del sistema y verifique el formato de la tabla de particiones de su unidad con el siguiente comando. Debería ver "**GPT**" listado bajo "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Ejecute este comando (en un símbolo del sistema ejecutado como administrador) para verificar su versión de TPM. Debería ver `2.0` o `1.2` junto a `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Accede a las [Opciones Avanzadas de Inicio](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). Debe reiniciar mientras pulsa la tecla F8 antes de que se inicie Windows y entrar en el símbolo del sistema ** en **Solucionar problemas** → **Opciones avanzadas** → **Símbolo del sistema**. -4. Inicie sesión con su cuenta de administrador y escriba esto en el símbolo del sistema para iniciar el cifrado: - - ```powershell - manage-bde -on c: -used - ``` - -5. Cierre el símbolo del sistema y continúe con el arranque normal de Windows. -6. Abra un símbolo del sistema como administrador y ejecute los siguientes comandos: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Consejo

- - Haga una copia de seguridad de `BitLocker-Recovery-Key.txt` en su escritorio para un dispositivo de almacenamiento independiente. La pérdida de este código de recuperación puede resultar en la pérdida de datos. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/es/frontends.md b/i18n/es/frontends.md index a3a2df75..e039a992 100644 --- a/i18n/es/frontends.md +++ b/i18n/es/frontends.md @@ -177,41 +177,6 @@ Al utilizar FreeTube, es posible que YouTube, [Invidious](https://instances.invi Por defecto, FreeTube bloquea todos los anuncios de YouTube. Además, FreeTube se integra opcionalmente con [SponsorBlock](https://sponsor.ajay.app) para ayudarle a saltarse los segmentos de vídeo patrocinados. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** es un reproductor de vídeo gratuito y de código abierto orientado a la privacidad para iOS, tvOS y macOS para [YouTube](https://youtube.com). Debido a las restricciones de la App Store, tendrá que seguir algunos [pasos adicionales](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) antes de poder utilizar Yattee para ver YouTube. Yattee le permite conectarse a instancias de [Invidious](#invidious) o [Piped](#piped). - -Cuando utiliza Yattee, su lista de suscriptores se guarda localmente en su dispositivo. - -[:octicons-home-16: Página Principal](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Política de Privacidad" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentación" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Código Fuente" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribuir" } - -
-Downloads "Descargas" - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Advertencia

- -Al utilizar Yattee, su dirección IP puede seguir siendo conocida por YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances) o [SponsorBlock](https://sponsor.ajay.app) dependiendo de su configuración. Considera usar una [VPN](vpn.md) o [Tor](tor.md) si tu [modelo de amenaza](basics/threat-modeling.md) requiere ocultar tu dirección IP. - -
- -Por defecto, Yattee bloquea todos los anuncios de YouTube. Además, Yattee se integra opcionalmente con [SponsorBlock](https://sponsor.ajay.app) para ayudarle a saltar segmentos de vídeo patrocinados. - ### LibreTube (Android)
diff --git a/i18n/es/tools.md b/i18n/es/tools.md index 624e9852..efc8ad5b 100644 --- a/i18n/es/tools.md +++ b/i18n/es/tools.md @@ -457,8 +457,7 @@ Para cifrar su unidad de SO, normalmente recomendamos utilizar la herramienta de - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) -- ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Escritorio)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) +- ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/fa/browser-extensions.md b/i18n/fa/browser-extensions.md index 2a6b11f2..88d1edd7 100644 --- a/i18n/fa/browser-extensions.md +++ b/i18n/fa/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/fa/data-broker-removals.md b/i18n/fa/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/fa/data-broker-removals.md +++ b/i18n/fa/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/fa/desktop-browsers.md b/i18n/fa/desktop-browsers.md index a8b45c9e..b468f64c 100644 --- a/i18n/fa/desktop-browsers.md +++ b/i18n/fa/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/fa/encryption.md b/i18n/fa/encryption.md index 4a5477d1..b2c5359b 100644 --- a/i18n/fa/encryption.md +++ b/i18n/fa/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/fa/frontends.md b/i18n/fa/frontends.md index 349e7cf8..29318a32 100644 --- a/i18n/fa/frontends.md +++ b/i18n/fa/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/fa/tools.md b/i18n/fa/tools.md index ef3a50b8..4fd83f78 100644 --- a/i18n/fa/tools.md +++ b/i18n/fa/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/fr/browser-extensions.md b/i18n/fr/browser-extensions.md index 31d32e85..a34cd96d 100644 --- a/i18n/fr/browser-extensions.md +++ b/i18n/fr/browser-extensions.md @@ -50,11 +50,11 @@ Voici d'autres [listes de filtres] (https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin possède également une version "Lite" de leur extension, qui offre un ensemble de fonctionnalités très limité par rapport à l'extension originale. Cependant, elle a quelques avantages distincts par rapport à sa grande soeur, donc vous pouvez l'envisager si... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. Cependant, elle a quelques avantages distincts par rapport à sa grande soeur, donc vous pouvez l'envisager si... - ...vous ne voulez pas accorder les autorisations complètes de "lecture/modification des données de sites web" à une extension (même une de confiance comme uBlock Origin) - ...vous voulez un bloqueur de contenu plus efficace en termes de ressources (mémoire/CPU)[^1] -- ...votre navigateur ne prend en charge que les extensions Manifest V3 +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin possède également une version "Lite" de leur extension, qui offr
-Nous ne recommandons cette version d'uBlock Origin que si vous ne voulez jamais apporter de modifications à vos listes de filtres, parce qu'elle ne prend en charge que quelques listes présélectionnées et n'offre aucune option de personnalisation supplémentaire, y compris la possibilité de sélectionner des éléments à bloquer manuellement. Ces restrictions sont dues à des limitations dans la conception du manifeste V3. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] Cette version offre trois niveaux de blocage : "Basique" fonctionne sans avoir besoin de privilèges spéciaux pour afficher et modifier le contenu du site, tandis que les niveaux "Optimal" et "Complet" requièrent cette large autorisation, mais offrent une meilleure expérience de filtrage avec des règles cosmétiques supplémentaires et des injections de scriptlet. @@ -88,7 +88,7 @@ uBlock Origin Lite ne reçoit les mises à jour de la liste de blocage que lorsq ### AdGuard -Nous recommandons [Safari](mobile-browsers.md#safari-ios) pour les utilisateurs d'iOS, qui n'est malheureusement pas pris supporté par uBlock Origin. Heureusement, AdGuard offre une alternative adéquate : +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Heureusement, AdGuard offre une alternative adéquate :
@@ -118,3 +118,7 @@ Les listes de filtres supplémentaires ralentissent la navigation et peuvent aug - Doit avoir un impact direct sur la vie privée des utilisateurs, c'est-à-dire qu'il ne doit pas simplement fournir des informations. [^1]: uBlock Origin Lite _lui-même_ ne consommera aucune ressource, parce qu'il utilise des APIs plus récentes qui permettent au navigateur de traiter nativement les listes de filtres, au lieu d'exécuter du code JavaScript dans l'extension pour gérer le filtrage. Cependant, cet avantage en termes de ressources n'est que [théorique](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), car il est possible que le code de filtrage standard de uBlock Origin soit plus efficace que le code de filtrage natif de votre navigateur. Cela n'a pas encore été évalué. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/fr/data-broker-removals.md b/i18n/fr/data-broker-removals.md index 124b25e5..232b7c88 100644 --- a/i18n/fr/data-broker-removals.md +++ b/i18n/fr/data-broker-removals.md @@ -32,7 +32,6 @@ Commencez par vérifier que vos données sont disponibles en cherchant sur ces s - BeenVerified ([Recherche](https://beenverified.com/app/optout/search), [Suppression](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Recherche](https://checkpeople.com/do-not-sell-info), sélectionnez _Supprimer vos donnnées personnelles_ pour vous désinscrire) - ClustrMaps ([Recherche](https://clustrmaps.com), [Suppression](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Recherche](https://dataveria.com), [Suppression](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Recherche](https://infotracer.com), [Suppression](https://infotracer.com/optout)) - Intelius ([Recherche](https://intelius.com), [Suppression](https://suppression.peopleconnect.us/login)) - PeekYou ([Recherche](https://peekyou.com), [Suppression](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/fr/desktop-browsers.md b/i18n/fr/desktop-browsers.md index 36066dc4..e2d23f50 100644 --- a/i18n/fr/desktop-browsers.md +++ b/i18n/fr/desktop-browsers.md @@ -181,9 +181,11 @@ Cela vous protège contre les cookies persistants, mais ne vous protège pas con ##### Télémétrie -- [ ] Décochez **Autoriser Firefox à envoyer des données techniques et d'interaction à Mozilla** -- [ ] Décochez **Autoriser Firefox à installer et à exécuter des études** -- [ ] Décochez **Permettre à Firefox d'envoyer en votre nom les rapports de plantage** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** Selon la politique de confidentialité de Mozilla pour Firefox, @@ -227,7 +229,7 @@ Le [Navigateur Mullvad](#mullvad-browser) offre d'emblée des protections anti-f
-Le [projet Arkenfox](https://github.com/arkenfox/user.js) propose un ensemble d'options soigneusement étudiées pour Firefox. Si vous [décidez](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) d'utiliser Arkenfox, quelques [options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) sont subjectivement strictes et/ou peuvent empêcher certains sites web de fonctionner correctement. Vous pouvez [facilement les modifier](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) pour les adapter à vos besoins. Nous vous **recommandons vivement** de lire l'intégralité de leur [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox permet également la prise en charge des [conteneurs](https://support.mozilla.org/kb/containers#w_for-advanced-users). +Le [projet Arkenfox](https://github.com/arkenfox/user.js) propose un ensemble d'options soigneusement étudiées pour Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. Nous vous **recommandons vivement** de lire l'intégralité de leur [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox permet également la prise en charge des [conteneurs](https://support.mozilla.org/kb/containers#w_for-advanced-users). Arkenfox vise uniquement à contrecarrer les scripts de pistage basiques ou naïfs grâce aux paramètres de configuration de randomisation du canevas et de la résistance aux empreintes numérique intégrée à Firefox. Il ne vise pas à faire en sorte que votre navigateur se fonde dans une foule d'autres utilisateurs d'Arkenfox, comme le font le Navigateur Mullvad ou le Navigateur Tor, ce qui est le seul moyen de contrecarrer les scripts avancés de pistage des empreintes numérique. Pour rappel, vous pouvez toujours utiliser plusieurs navigateurs internet. Par exemple, vous pourriez utiliser Firefox+Arkenfox pour les sites sur lesquels vous voudriez rester connecté ou en lesquels vous avez confiance, et utiliser Mullvad Browser pour la navigation standard. diff --git a/i18n/fr/encryption.md b/i18n/fr/encryption.md index f68c943c..faf7ed87 100644 --- a/i18n/fr/encryption.md +++ b/i18n/fr/encryption.md @@ -96,6 +96,14 @@ TrueCrypt a été [audité plusieurs fois](https://en.wikipedia.org/wiki/TrueCry Les solutions de chiffrement intégrées au système d'exploitation s'appuient généralement sur les fonctionnalités de sécurité du hardware, comme un [cryptoprocesseur sécurisé](basics/hardware.md#tpmsecure-cryptoprocessor). C'est pourquoi nous vous recommandons d'utiliser les solutions de chiffrement intégrées à votre système d'exploitation. Pour un chiffrement multiplateforme, nous recommandons toujours [des outils multiplateformes](#multi-platform) pour plus de flexibilité, et éviter le verrouillage des fournisseurs. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Les solutions de chiffrement intégrées au système d'exploitation s'appuient g
-BitLocker est [officiellement disponible](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) sur les éditions Pro, Entreprise et Education de Windows. Il est possible de l'activer sur les éditions Home qui répondent aux critères suivants. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Activer BitLocker dans Windows Famille - -Pour activer BitLocker sur les éditions "Famille" de Windows, vous devez formater vos partitions avec une [Table de Partitionnement GUID](https://en.wikipedia.org/wiki/GUID_Partition_Table) et disposer d'un module TPM dédié (v1.2, 2.0+). Il se peut que vous deviez [désactiver la fonctionnalité "Chiffrement de l'appareil" non-Bitlocker](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (qui est inférieure car elle envoie votre clé de récupération aux serveurs de Microsoft) si elle est déjà activée sur votre appareil avant de suivre ce guide. - -1. Ouvrez une invite de commande et vérifiez le format de la table de partition de votre disque à l'aide de la commande suivante. Vous devriez voir "**GPT**" listé sous "Style de partition" : - - ```powershell - powershell Get-Disk - ``` - -2. Exécutez cette commande (dans une invite de commande administrateur) pour vérifier la version de votre TPM. Vous devriez voir `2.0` ou `1.2` listé à côté de `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Accèdez aux [Options de démarrage avancées](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). Vous devez redémarrer en appuyant sur la touche F8 avant que Windows ne démarre et aller dans l'*invite de commande* dans **Dépannage** → **Options avancées** → **Invite de commande**. -4. Connectez-vous avec votre compte administrateur et tapez ceci dans l'invite de commande pour lancer le chiffrement: - - ```powershell - manage-bde -on c: -used - ``` - -5. Fermez l'invite de commande et continuez le démarrage vers Windows normalement. -6. Ouvrez une invite de commande administrateur et exécutez les commandes suivantes: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Conseil

- - Sauvegardez le fichier `BitLocker-Recovery-Key.txt` de votre ordinateur de bureau sur un périphérique de stockage distinct. La perte de ce code de récupération peut entraîner la perte de données. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
@@ -218,7 +188,7 @@ cryptsetup luksHeaderBackup /dev/device --header-backup-file /mnt/backup/file.im ## Ligne de commande -Protège des menaces suivantes : +Protège contre les menaces suivantes : - [:material-target-account: Attaques ciblées](basics/common-threats.md#attacks-against-specific-individuals ""){.pg-red} diff --git a/i18n/fr/frontends.md b/i18n/fr/frontends.md index 5d893c5e..5fd3d152 100644 --- a/i18n/fr/frontends.md +++ b/i18n/fr/frontends.md @@ -177,41 +177,6 @@ Selon votre configuration, lorsque vous utilisez FreeTube, votre adresse IP peut Par défaut, FreeTube bloque toutes les publicités YouTube. FreeTube vous permet, si vous le souhaitez, d'utiliser [SponsorBlock](https://sponsor.ajay.app) pour passer automatiquement les segments de vidéos dédiés au sponsor. -### Yattee - -
- -![Logo de Yattee](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** est un lecteur de vidéos libre et open-source orienté sur la confidentialité pour [YouTube](https://youtube.com) sur iOS, tvOS et macOS. A cause des restrictions de l'App Store, il vous faudra faire [quelques manipulations](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) avant de pouvoir utiliser Yattee. Yattee vous permet de vous connecter à des instances de [Invidious](#invidious) ou [Piped](#piped). - -Lorsque vous utilisez Yattee, votre liste d'abonnements est sauvegardée localement sur votre appareil. - -[:octicons-home-16: Page d'Accueil](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Politique de Confidentialité" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Code Source" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribuer" } - -
-Télécharger - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Avertissement

- -Selon votre configuration, lorsque vous utilisez Yattee, votre adresse IP peut être visible par YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances) ou [SponsorBlock](https://sponsor.ajay.app). Si votre [modèle de menace](basics/threat-modeling.md) nécessite que vous cachiez votre adresse IP, vous pouvez utiliser un [VPN](vpn.md) ou [Tor](tor.md). - -
- -Par défaut, Yattee bloque toutes les publicités YouTube. En outre, Yattee s'intègre en option à [SponsorBlock](https://sponsor.ajay.app) pour vous aider à sauter les segments vidéo sponsorisés. - ### LibreTube (Android)
diff --git a/i18n/fr/tools.md b/i18n/fr/tools.md index b8e7cacf..cabcb1ee 100644 --- a/i18n/fr/tools.md +++ b/i18n/fr/tools.md @@ -456,14 +456,13 @@ Pour chiffre le disque de votre système d'exploitation, nous vous recommandons
-- ![Logo de Redlib](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) -- ![Logo de ProxiTok](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) -- ![Logo de FreeTube](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, PC)](frontends.md#freetube) -- ![Logo de Yattee](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) -- ![Logo de LibreTube](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![Logo de LibreTube](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) -- ![Logo de NewPipe](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) -- ![Logo d'Invidious](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Logo d'Invidious](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) -- ![Logo de Piped](assets/img/frontends/piped.svg){ .twemoji loading=lazy } [Piped (YouTube, Web)](frontends.md#piped) +- ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) +- ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) +- ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) +- ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) +- ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) +- ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) +- ![Piped logo](assets/img/frontends/piped.svg){ .twemoji loading=lazy } [Piped (YouTube, Web)](frontends.md#piped)
diff --git a/i18n/he/browser-extensions.md b/i18n/he/browser-extensions.md index c45fdd4e..6179368b 100644 --- a/i18n/he/browser-extensions.md +++ b/i18n/he/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfort - חייב להשפיע ישירות על פרטיות המשתמש, כלומר לא חייב פשוט לספק מידע. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/he/data-broker-removals.md b/i18n/he/data-broker-removals.md index 7ec5f762..6de59a5a 100644 --- a/i18n/he/data-broker-removals.md +++ b/i18n/he/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/he/desktop-browsers.md b/i18n/he/desktop-browsers.md index 8ca854ba..1219f86f 100644 --- a/i18n/he/desktop-browsers.md +++ b/i18n/he/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] בטל את הסימון **לאפשר ל-Firefox לשלוח אל Mozilla מידע טכני ופעולות שבוצעו בדפדפן** -- [ ] בטל את הסימון **לאפשר ל-Firefox להתקין ולהריץ מחקרים** -- [ ] בטל את הסימון **לאפשר ל-Firefox דיווחי קריסות שנשמרו בשמך** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/he/encryption.md b/i18n/he/encryption.md index d2694f84..304a0af0 100644 --- a/i18n/he/encryption.md +++ b/i18n/he/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. פתח שורת פקודה ובדוק את תבנית טבלת המחיצות של הכונן באמצעות הפקודה הבאה. אתה אמור לראות את "**GPT**" ברשימה תחת "סגנון מחיצה": - - ```powershell - powershell Get-Disk - ``` - -2. הפעל פקודה זו (בשורת פקודה של אדמין) כדי לבדוק את גרסת ה-TPM שלך. אתה אמור לראות את `2.0` או `1.2` לצד `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). עליך לאתחל מחדש תוך כדי לחיצה על מקש F8 לפני הפעלת Windows ולהיכנס ל *שורת הפקודה* ב **פתרון בעיות** → **אפשרויות מתקדמות** → **שורת הפקודהPrompt**. -4. התחבר עם חשבון הניהול שלך והקלד זאת בשורת הפקודה כדי להתחיל בהצפנה: - - ```powershell - manage-bde -on c: -used - ``` - -5. סגור את שורת הפקודה והמשך אתחול ל-Windows רגיל. -6. פתח שורת פקודה של מנהל מערכת והפעל את הפקודות הבאות: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- - גיבוי 'BitLocker-Recovery-Key.txt' בשולחן העבודה שלך להתקן אחסון נפרד. אובדן קוד שחזור זה עלול לגרום לאובדן נתונים. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/he/frontends.md b/i18n/he/frontends.md index 545ae6a7..4f10c5da 100644 --- a/i18n/he/frontends.md +++ b/i18n/he/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( כברירת מחדל, FreeTube חוסמת את כל הפרסומות של יוטיוב. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -כברירת מחדל, Yattee חוסם את כל הפרסומות ב - YouTube. בנוסף, Yattee משתלב באופן אופציונלי עם [SponsorBlock](https://sponsor.ajay.app) כדי לעזור לך לדלג על קטעי וידאו ממומנים. - ### LibreTube (אנדרואיד)
diff --git a/i18n/he/tools.md b/i18n/he/tools.md index 20aba1ff..1e67d781 100644 --- a/i18n/he/tools.md +++ b/i18n/he/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/hi/browser-extensions.md b/i18n/hi/browser-extensions.md index 2a6b11f2..88d1edd7 100644 --- a/i18n/hi/browser-extensions.md +++ b/i18n/hi/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/hi/data-broker-removals.md b/i18n/hi/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/hi/data-broker-removals.md +++ b/i18n/hi/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/hi/desktop-browsers.md b/i18n/hi/desktop-browsers.md index 894d9d65..22cfd748 100644 --- a/i18n/hi/desktop-browsers.md +++ b/i18n/hi/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/hi/encryption.md b/i18n/hi/encryption.md index 638be4e2..bcbfca1e 100644 --- a/i18n/hi/encryption.md +++ b/i18n/hi/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/hi/frontends.md b/i18n/hi/frontends.md index 8dd6acc9..1b9b0a83 100644 --- a/i18n/hi/frontends.md +++ b/i18n/hi/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/hi/tools.md b/i18n/hi/tools.md index 076f3012..06858ee4 100644 --- a/i18n/hi/tools.md +++ b/i18n/hi/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/hu/browser-extensions.md b/i18n/hu/browser-extensions.md index 15714146..220171f1 100644 --- a/i18n/hu/browser-extensions.md +++ b/i18n/hu/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/hu/data-broker-removals.md b/i18n/hu/data-broker-removals.md index 6122020b..5ecdfe6f 100644 --- a/i18n/hu/data-broker-removals.md +++ b/i18n/hu/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/hu/desktop-browsers.md b/i18n/hu/desktop-browsers.md index 0472a9b3..d91cd12b 100644 --- a/i18n/hu/desktop-browsers.md +++ b/i18n/hu/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/hu/encryption.md b/i18n/hu/encryption.md index 24337150..d984c694 100644 --- a/i18n/hu/encryption.md +++ b/i18n/hu/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/hu/frontends.md b/i18n/hu/frontends.md index 690b394f..1de75c4f 100644 --- a/i18n/hu/frontends.md +++ b/i18n/hu/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Figyelmeztetés

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/hu/tools.md b/i18n/hu/tools.md index d398ac8b..a8227ff7 100644 --- a/i18n/hu/tools.md +++ b/i18n/hu/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/id/browser-extensions.md b/i18n/id/browser-extensions.md index 81a37dc7..15b4761a 100644 --- a/i18n/id/browser-extensions.md +++ b/i18n/id/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/id/data-broker-removals.md b/i18n/id/data-broker-removals.md index 9e8d9c47..cf2bd7fe 100644 --- a/i18n/id/data-broker-removals.md +++ b/i18n/id/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/id/desktop-browsers.md b/i18n/id/desktop-browsers.md index 92f101bf..355ead65 100644 --- a/i18n/id/desktop-browsers.md +++ b/i18n/id/desktop-browsers.md @@ -181,9 +181,11 @@ Ini melindungi Anda dari cookie yang persisten, tetapi tidak melindungi Anda dar ##### Telemetry -- [ ] Hapus centang **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Hapus centang **Allow Firefox to install and run studies** -- [ ] Hapus centang **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** Menurut kebijakan privasi Mozilla untuk Firefox, @@ -227,7 +229,7 @@ Max Protection memberlakukan penggunaan DNS over HTTPS, dan peringatan keamanan
-[Proyek Arkenfox](https://github.com/arkenfox/user.js) menyediakan seperangkat opsi yang dipertimbangkan dengan cermat untuk Firefox. Jika Anda [memutuskan](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) untuk menggunakan Arkenfox, [beberapa opsi](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) secara subyektif sangat ketat dan/atau dapat menyebabkan beberapa situs web tidak berfungsi dengan baik-yang dapat Anda [ubah dengan mudah](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) untuk memenuhi kebutuhan Anda. Kami **sangat menyarankan untuk** membaca [wiki](https://github.com/arkenfox/user.js/wiki) lengkap mereka. Arkenfox juga memungkinkan dukungan [kontainer](https://support.mozilla.org/kb/containers#w_for-advanced-users). +[Proyek Arkenfox](https://github.com/arkenfox/user.js) menyediakan seperangkat opsi yang dipertimbangkan dengan cermat untuk Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. Kami **sangat menyarankan untuk** membaca [wiki](https://github.com/arkenfox/user.js/wiki) lengkap mereka. Arkenfox juga memungkinkan dukungan [kontainer](https://support.mozilla.org/kb/containers#w_for-advanced-users). Arkenfox hanya bertujuan untuk menggagalkan skrip pelacakan dasar atau naif melalui pengacakan kanvas dan pengaturan konfigurasi resistensi fingerprint bawaan Firefox. Browser ini tidak bertujuan untuk membuat browser Anda berbaur dengan kerumunan besar pengguna Arkenfox lainnya dengan cara yang sama seperti yang dilakukan oleh Mullvad Browser atau Tor Browser, yang merupakan satu-satunya cara untuk menggagalkan skrip pelacakan fingerprint tingkat lanjut. Ingatlah bahwa Anda selalu dapat menggunakan beberapa browser, misalnya, Anda dapat mempertimbangkan untuk menggunakan Firefox-Arkenfox untuk beberapa situs yang Anda ingin tetap masuk atau percayai, dan Mullvad Browser untuk penjelajahan umum. diff --git a/i18n/id/encryption.md b/i18n/id/encryption.md index 63e1674b..68fd41a7 100644 --- a/i18n/id/encryption.md +++ b/i18n/id/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/id/frontends.md b/i18n/id/frontends.md index 00de65c7..ffa92394 100644 --- a/i18n/id/frontends.md +++ b/i18n/id/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Peringatan

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/id/tools.md b/i18n/id/tools.md index 1b04362a..ee0950bc 100644 --- a/i18n/id/tools.md +++ b/i18n/id/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/it/browser-extensions.md b/i18n/it/browser-extensions.md index 6fd14d1d..40bc3dee 100644 --- a/i18n/it/browser-extensions.md +++ b/i18n/it/browser-extensions.md @@ -49,11 +49,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -76,7 +76,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -86,7 +86,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -115,3 +115,7 @@ Ulteriori elenchi di filtri potrebbero rallentare le prestazioni e incrementare - Deve influenzare direttamente la privacy dell'utente, cioè non deve semplicemente fornire informazioni. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/it/data-broker-removals.md b/i18n/it/data-broker-removals.md index 15dcea1c..474dd559 100644 --- a/i18n/it/data-broker-removals.md +++ b/i18n/it/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/it/desktop-browsers.md b/i18n/it/desktop-browsers.md index 5d36087a..f945e7f1 100644 --- a/i18n/it/desktop-browsers.md +++ b/i18n/it/desktop-browsers.md @@ -181,9 +181,11 @@ Ciò ti protegge dai cookie persistenti, ma non da quelli acquisiti durante ogni ##### Telemetria -- [ ] Rimuovi la spunta da **Consenti a Firefox di inviare a Mozilla dati tecnici e relativi all’interazione con il browser** -- [ ] Rimuovi la spunta da **Consenti a Firefox di installare e condurre studi** -- [ ] Rimuovi la spunta da **Consenti a Firefox di inviare segnalazioni di arresto anomalo in sospeso** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** Secondo la politica sulla privacy di Mozilla, Firefox: @@ -227,7 +229,7 @@ La protezione massima impone l'uso del DNS su HTTPS e viene visualizzato un avvi
-Il [progetto Arkenfox](https://github.com/arkenfox/user.js) offre una serie di opzioni attentamente valutate per Firefox. Se [decidi](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) di utilizzare Arkenfox, [alcune opzioni](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) sono soggettivamente rigide e/o potrebbero causare il malfunzionamento di alcuni siti web, ma puoi [facilmente modificarle](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) secondo le tue necessità. Ti **consigliamo vivamente** di leggere la loro [wiki](https://github.com/arkenfox/user.js/wiki) completa. Arkenfox consente anche il supporto [dei container](https://support.mozilla.org/kb/containers#w_for-advanced-users). +Il [progetto Arkenfox](https://github.com/arkenfox/user.js) offre una serie di opzioni attentamente valutate per Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. Ti **consigliamo vivamente** di leggere la loro [wiki](https://github.com/arkenfox/user.js/wiki) completa. Arkenfox consente anche il supporto [dei container](https://support.mozilla.org/kb/containers#w_for-advanced-users). Arkenfox mira solo a contrastare gli script di tracciamento semplici attraverso la randomizzazione del canvas e le impostazioni di configurazione della resistenza al fingerprinting integrate in Firefox. Non mira a far sì che il tuo browser si confonda con una grande folla di altri utenti Arkenfox, come fanno Mullvad Browser o Tor Browser, che è l'unico modo per contrastare gli script avanzati di tracciamento fingerprinting avanzati. Ricordati che puoi sempre utilizzare più browser, ad esempio, potresti considerare di utilizzare Firefox+Arkenfox per alcuni siti cui desideri rimanere connesso o di cui ti fidi, e Mullvad Browser per la navigazione generale. diff --git a/i18n/it/encryption.md b/i18n/it/encryption.md index dc1fd4e2..72d687af 100644 --- a/i18n/it/encryption.md +++ b/i18n/it/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Abilitare BitLocker su Windows Home - -Per abilitare BitLocker sulle edizioni "Home" di Windows, è necessario che le partizioni siano formattate con una [tabella delle partizioni GUID](https://en.wikipedia.org/wiki/GUID_Partition_Table) e che sia presente un modulo TPM dedicato (v1.2, 2.0+). Potrebbe essere necessario [disabilitare la funzionalità non-Bitlocker "Crittografia dispositivo"](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (che è inferiore perché invia la chiave di recupero ai server di Microsoft) se è abilitata sul dispositivo già prima di seguire questa guida. - -1. Apri il prompt dei comandi e verifica il formato della tabella di partizione dell'unità, con il seguente comando. Dovresti vedere "**GPT**" elencato sotto "Stile di Partizione": - - ```powershell - powershell Get-Disk - ``` - -2. Esegui questo comando (nel prompt dei comandi da admin), per verificare la tua versione di TPM. Dovresti vedere `2.0` o `1.2`, elencato affianco a `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). Devi riavviare premendo il tasto F8, prima dell'avvio di Windows e andare nel *prompt dei comandi* in **Risoluzione dei Problemi** → **Opzioni Avanzate** → **Prompt dei Comandi**. -4. Accedi con il tuo profilo da amministratore e digita nel prompt dei comandi questo comando, per avviare la crittografia: - - ```powershell - manage-bde -on c: -used - ``` - -5. Chiudi il prompt dei comandi e procedi con l'avvio regolare di Windows. -6. Apri il prompt dei comandi con privilegi da amministratore ed esegui i seguenti comandi: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Suggerimento

- -Esegui il backup di 'BitLocker-Recovery-Key.txt' sul tuo desktop, in un dispositivo d'archiviazione separato. La perdita del codice di recupero potrebbe risultare nella perdita dei dati. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/it/frontends.md b/i18n/it/frontends.md index 9d3a9b2f..87aff893 100644 --- a/i18n/it/frontends.md +++ b/i18n/it/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( Di default, FreeTube blocca tutte le inserzioni di YouTube. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Scarica - -- [:simple-apple: App Store](https://apps.apple.com/it/app/yattee/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Avviso

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Considera l'utilizzo di una [VPN](vpn.md) o di [Tor](tor.md) se il tuo [modello di minaccia](basics/threat-modeling.md) richiede di nascondere il tuo indirizzo IP. - -
- -Di default, Yattee blocca tutte le inserzioni di YouTube. Inoltre, Yattee integra facoltativamente [SponsorBlock](https://sponsor.ajay.app) per aiutarti a saltare i segmenti sponsorizzati dei video. - ### LibreTube (Android)
diff --git a/i18n/it/tools.md b/i18n/it/tools.md index f2b3684c..2974a0c1 100644 --- a/i18n/it/tools.md +++ b/i18n/it/tools.md @@ -455,14 +455,13 @@ For encrypting your OS drive, we typically recommend using the encryption tool y
-- ![Logo di Redlib](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) -- ![Logo di ProxiTok](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) -- ![Logo di FreeTube](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Logo di Yattee](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) -- ![Logo di LibreTube](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![Logo di LibreTube](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) -- ![Logo di NewPipe](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) -- ![Logo di Invidious](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Logo di Invidious](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) -- ![Logo di Piped](assets/img/frontends/piped.svg){ .twemoji loading=lazy } [Piped (YouTube, Web)](frontends.md#piped) +- ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) +- ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) +- ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) +- ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) +- ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) +- ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) +- ![Piped logo](assets/img/frontends/piped.svg){ .twemoji loading=lazy } [Piped (YouTube, Web)](frontends.md#piped)
diff --git a/i18n/ja/browser-extensions.md b/i18n/ja/browser-extensions.md index a4615a04..30231817 100644 --- a/i18n/ja/browser-extensions.md +++ b/i18n/ja/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfort - ユーザーのプライバシーに直接影響を与えるものであること。つまり、単に情報を提供するだけではないこと。 [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/ja/data-broker-removals.md b/i18n/ja/data-broker-removals.md index c179c757..efa6da98 100644 --- a/i18n/ja/data-broker-removals.md +++ b/i18n/ja/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/ja/desktop-browsers.md b/i18n/ja/desktop-browsers.md index 6ad48ac6..0097facc 100644 --- a/i18n/ja/desktop-browsers.md +++ b/i18n/ja/desktop-browsers.md @@ -181,9 +181,11 @@ Firefoxは、Mozillaのウェブサイトからのダウンロードに固有の ##### テレメトリー -- [ ] **Firefox が技術的な対話データを Mozilla へ送信することを許可する**のチェックを外す -- [ ] **Firefox に調査のインストールと実行を許可する**のチェックを外す -- [ ] **Firefox があなたに代わって未送信のクラッシュレポートを送信することを許可する**のチェックを外すこと +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** MozillaのFirefoxプライバシーポリシーでは以下のように記載されています @@ -227,7 +229,7 @@ Firefox 128から、[プライバシー保護されたアトリビューショ
-[Arkenfox project](https://github.com/arkenfox/user.js)はFirefoxの注意深く考えられた設定を提供しています。 もし、Arkenfoxを利用[する](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not)場合、[いくつかの設定](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common])はあえて厳しくしているためウェブサイトが正常に表示されないことがあります。必要に応じ[簡単に変更](https://github.com/arkenfox/user.js/wiki/3.1-Overrides)できます。 プロジェクトの[wiki](https://github.com/arkenfox/user.js/wiki)をすべて読むことを**強く推奨**します。 Arkenfoxは[コンテナー](https://support.mozilla.org/kb/containers#w_for-advanced-users)をサポートしています。 +[Arkenfox project](https://github.com/arkenfox/user.js)はFirefoxの注意深く考えられた設定を提供しています。 If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. プロジェクトの[wiki](https://github.com/arkenfox/user.js/wiki)をすべて読むことを**強く推奨**します。 Arkenfoxは[コンテナー](https://support.mozilla.org/kb/containers#w_for-advanced-users)をサポートしています。 Arkenfoxはcanvasのランダム化やFirefoxの標準で利用できるフィンガープリント対策で基本的・単純なトラッキングスクリプトを防ぐことのみを目的としています。 Mulllvad BrowserやTor BrowserのようにArkenfoxユーザーを一つの集団として扱うこと（高度なフィンガープリントトラッキングスクリプトを防ぐ唯一の方法）は目的としていません。 いつも複数のブラウザを利用できることを覚えておいてください。例えば、ログインを維持したい、もしくは信用できるウェブサイトはFirefoxとArkenfoxを利用し、通常のブラウジングではMullvad Browserを利用することもできます。 diff --git a/i18n/ja/encryption.md b/i18n/ja/encryption.md index 4326e91f..8cda8a5f 100644 --- a/i18n/ja/encryption.md +++ b/i18n/ja/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. このコマンドを（管理者コマンドプロンプトで）実行し、TPMのバージョンを確認してください。 You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/ja/frontends.md b/i18n/ja/frontends.md index a91d8a34..990d4c00 100644 --- a/i18n/ja/frontends.md +++ b/i18n/ja/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

注意

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -デフォルトでは、Yatteeは全てのYouTubeの広告をブロックします。 In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/ja/tools.md b/i18n/ja/tools.md index 91c52941..e9a8db3f 100644 --- a/i18n/ja/tools.md +++ b/i18n/ja/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/ko/browser-extensions.md b/i18n/ko/browser-extensions.md index caac359e..90188007 100644 --- a/i18n/ko/browser-extensions.md +++ b/i18n/ko/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfort - 사용자 프라이버시에 직접적인 이점을 제공해야 합니다. 단순 정보 제공은 기준 미달입니다. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/ko/data-broker-removals.md b/i18n/ko/data-broker-removals.md index e12f99d6..294e0c89 100644 --- a/i18n/ko/data-broker-removals.md +++ b/i18n/ko/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/ko/desktop-browsers.md b/i18n/ko/desktop-browsers.md index fa5b022a..8e6fe262 100644 --- a/i18n/ko/desktop-browsers.md +++ b/i18n/ko/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### 원격 분석 -- [ ] **Firefox가 기술과 상호 작용 정보를 Mozilla에 전송하도록 허용** 비활성화 -- [ ] **Firefox가 연구를 설치하고 실행하도록 허용** 비활성화 -- [ ] **Firefox가 사용자를 대신하여 백로그된 충돌 보고서를 보내도록 허용** 비활성화 +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/ko/encryption.md b/i18n/ko/encryption.md index 09cc88a2..ac8efe83 100644 --- a/i18n/ko/encryption.md +++ b/i18n/ko/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -데스크톱의 `BitLocker-Recovery-Key.txt`를 별도 저장 장치에 백업하세요. 해당 복구 코드를 분실하면 데이터를 잃어버리게 될 수 있습니다. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/ko/frontends.md b/i18n/ko/frontends.md index 0b72f21a..bfbdbd14 100644 --- a/i18n/ko/frontends.md +++ b/i18n/ko/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/ko/tools.md b/i18n/ko/tools.md index f10308cb..dd01c9ac 100644 --- a/i18n/ko/tools.md +++ b/i18n/ko/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/ku-IQ/browser-extensions.md b/i18n/ku-IQ/browser-extensions.md index 2a6b11f2..88d1edd7 100644 --- a/i18n/ku-IQ/browser-extensions.md +++ b/i18n/ku-IQ/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/ku-IQ/data-broker-removals.md b/i18n/ku-IQ/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/ku-IQ/data-broker-removals.md +++ b/i18n/ku-IQ/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/ku-IQ/desktop-browsers.md b/i18n/ku-IQ/desktop-browsers.md index 894d9d65..22cfd748 100644 --- a/i18n/ku-IQ/desktop-browsers.md +++ b/i18n/ku-IQ/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/ku-IQ/encryption.md b/i18n/ku-IQ/encryption.md index 638be4e2..bcbfca1e 100644 --- a/i18n/ku-IQ/encryption.md +++ b/i18n/ku-IQ/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/ku-IQ/frontends.md b/i18n/ku-IQ/frontends.md index 8dd6acc9..1b9b0a83 100644 --- a/i18n/ku-IQ/frontends.md +++ b/i18n/ku-IQ/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/ku-IQ/tools.md b/i18n/ku-IQ/tools.md index 8b76ceca..cb98f12e 100644 --- a/i18n/ku-IQ/tools.md +++ b/i18n/ku-IQ/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/nl/browser-extensions.md b/i18n/nl/browser-extensions.md index abf44cd5..88ba2bf5 100644 --- a/i18n/nl/browser-extensions.md +++ b/i18n/nl/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -Wij raden [Safari](mobile-browsers.md#safari-ios) aan voor iOS-gebruikers, die helaas niet wordt ondersteund door uBlock Origin. Gelukkig biedt AdGuard een geschikt alternatief: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Gelukkig biedt AdGuard een geschikt alternatief:
@@ -118,3 +118,7 @@ Extra filterlijsten kunnen de prestaties beïnvloeden en het aanvalsoppervlak ve - Moet rechtstreeks van invloed zijn op de privacy van de gebruiker, d.w.z. mag niet gewoon informatie verstrekken. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/nl/data-broker-removals.md b/i18n/nl/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/nl/data-broker-removals.md +++ b/i18n/nl/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/nl/desktop-browsers.md b/i18n/nl/desktop-browsers.md index 46e03acd..6011c959 100644 --- a/i18n/nl/desktop-browsers.md +++ b/i18n/nl/desktop-browsers.md @@ -181,9 +181,11 @@ Dit beschermt je tegen permanente cookies, maar beschermt je niet tegen cookies ##### Telemetrie -- [ ] Deselecteer **Firefox toestaan technische en interactiegegevens naar Mozilla**te sturen -- [ ] Deselecteer **Firefox toestaan om studies te installeren en uit te voeren** -- [ ] Deselecteer **Firefox toestaan achterstallige crashmeldingen namens jou te verzenden** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** Volgens Mozilla's privacybeleid voor Firefox, @@ -227,7 +229,7 @@ Max Protection dwingt het gebruik van DNS over HTTPS af, en er wordt een beveili
-Het [Arkenfox-project](https://github.com/arkenfox/user.js) biedt een reeks weloverwogen opties voor Firefox. Als je [besluit](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) om Arkenfox te gebruiken, zijn een [paar opties](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) subjectief streng en/ of kunnen ervoor zorgen dat sommige websites niet goed werken - deze kun je [eenvoudig wijzigen](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) om aan jouw behoeften te voldoen. We raden **je sterk aan** om hun volledige [wiki](https://github.com/arkenfox/user.js/wiki) te lezen. Arkenfox biedt ook [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) ondersteuning. +Het [Arkenfox-project](https://github.com/arkenfox/user.js) biedt een reeks weloverwogen opties voor Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We raden **je sterk aan** om hun volledige [wiki](https://github.com/arkenfox/user.js/wiki) te lezen. Arkenfox biedt ook [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) ondersteuning. Arkenfox is er alleen op gericht om eenvoudige of naïeve volgscripts te dwarsbomen via canvas randomisatie en de ingebouwde configuratie-instellingen voor vingerafdrukbestendigheid van Firefox. Het is niet erop gericht om jouw browser te laten opgaan in een grote menigte van andere Arkenfox-gebruikers zoals Mullvad Browser of Tor Browser dat doen, wat de enige manier is om geavanceerde scripts voor het traceren van vingerafdrukken te dwarsbomen. Vergeet niet dat je altijd meerdere browsers kunt gebruiken, bijvoorbeeld door Firefox+Arkenfox te gebruiken voor een paar sites waarop je ingelogd wilt blijven of die je anderszins vertrouwt, en Mullvad Browser voor algemeen browsen. diff --git a/i18n/nl/encryption.md b/i18n/nl/encryption.md index c5d48d91..891388a5 100644 --- a/i18n/nl/encryption.md +++ b/i18n/nl/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open een opdrachtprompt en controleer de indeling van de partitietabel van jouw schijf met het volgende commando. Je zou "**GPT**" moeten zien staan onder "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Voer dit commando uit (in een admin commando prompt) om jouw TPM versie te controleren. Je zou `2.0` of `1.2` moeten zien staan naast `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). Je moet opnieuw opstarten terwijl je op de F8-toets drukt voordat Windows start en naar de *opdrachtprompt* gaat in **Problemen oplossen** → **Geavanceerde opties** → **Opdrachtprompt**. -4. Log in met jouw admin-account en typ dit in de opdrachtprompt om de versleuteling te starten: - - ```powershell - manage-bde -on c: -used - ``` - -5. Sluit de opdrachtprompt en en start verder op naar de gewone Windows installatie. -6. Open een admin commando prompt en voer de volgende commando's uit: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- - Back-up de `BitLocker-Recovery-Key.txt` op uw bureaublad naar een apart opslagapparaat. Het verlies van deze herstelcode kan leiden tot verlies van gegevens. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/nl/frontends.md b/i18n/nl/frontends.md index 538079e2..c86b886d 100644 --- a/i18n/nl/frontends.md +++ b/i18n/nl/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( Standaard blokkeert FreeTube alle YouTube-advertenties. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Waarschuwing

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -Yattee blokkeert standaard alle YouTube-advertenties. Bovendien integreert Yattee optioneel met [SponsorBlock](https://sponsor.ajay.app) om u te helpen gesponsorde videosegmenten over te slaan. - ### LibreTube (Android)
diff --git a/i18n/nl/tools.md b/i18n/nl/tools.md index d1c67a06..b511e2fa 100644 --- a/i18n/nl/tools.md +++ b/i18n/nl/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/pl/browser-extensions.md b/i18n/pl/browser-extensions.md index caa78d0d..e05fc68e 100644 --- a/i18n/pl/browser-extensions.md +++ b/i18n/pl/browser-extensions.md @@ -50,11 +50,11 @@ Oto kilka przykładowych [list filtrów](https://github.com/gorhill/uBlock/wiki/ ### uBlock Origin Lite -uBlock Origin ma też wersję „Lite”, która oferuje bardzo ograniczony zestaw funkcji w porównaniu z oryginałem. Ma jednak kilka istotnych zalet względem swojej pełnoprawnej wersji, więc warto ją rozważyć, jeśli: +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. Ma jednak kilka istotnych zalet względem swojej pełnoprawnej wersji, więc warto ją rozważyć, jeśli: - nie chcesz przyznawać żadnym rozszerzeniom pełnych uprawnień „odczytu i modyfikacji danych witryn” (nawet zaufanemu jak uBlock Origin), - zależy Ci na bardziej oszczędnym pod względem zasobów (pamięci/procesora) blokerze treści[^1], -- Twoja przeglądarka obsługuje jedynie rozszerzenia zgodne z Manifest V3. +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin ma też wersję „Lite”, która oferuje bardzo ograniczony zest
-Zalecamy korzystanie z tej wersji uBlock Origin tylko wtedy, gdy nie planuje się wprowadzać żadnych zmian w listach filtrów, ponieważ obsługuje ona wyłącznie kilka wcześniej wybranych list i nie oferuje dodatkowych opcji personalizacji, w tym możliwości ręcznego wybierania elementów do zablokowania. Ograniczenia te wynikają z ograniczeń projektowych Manifest V3. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] Wersja ta oferuje trzy poziomy blokowania: „podstawowy” działa bez konieczności przyznawania specjalnych uprawnień do przeglądania i modyfikacji zawartości stron, natomiast poziomy „optymalny” i „kompletny” wymagają takich szerokich uprawnień, lecz zapewniają lepsze filtrowanie dzięki dodatkowym regułom kosmetycznym i wstrzykiwaniu skryptów. @@ -88,7 +88,7 @@ uBlock Origin Lite aktualizuje listy blokowania tylko przy aktualizacji rozszerz ### AdGuard -Zalecamy przeglądarkę [Safari](mobile-browsers.md#safari-ios) dla użytkowników iOS, która niestety nie obsługuje uBlock Origin. Na szczęście AdGuard stanowi odpowiednią alternatywę: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Na szczęście AdGuard stanowi odpowiednią alternatywę:
@@ -118,3 +118,7 @@ Dodatkowe listy filtrów mogą spowalniać działanie i zwiększać powierzchni - Musi bezpośrednio wpływać na prywatność użytkownika — innymi słowy, nie może jedynie dostarczać informacji. [^1]: uBlock Origin Lite _sam w sobie_ nie zużywa zasobów bezpośrednio, ponieważ wykorzystuje nowsze interfejsy API, które sprawiają, że to przeglądarka natywnie przetwarza listy filtrów, zamiast uruchamiać kod JavaScript w rozszerzeniu do obsługi filtrowania. Ta przewaga zasobowa jest jednak jedynie [teoretyczna](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), ponieważ możliwe, że kod filtrowania standardowego uBlock Origin jest bardziej wydajny niż natywne filtrowanie przeglądarki. Nie zostało to jak dotąd zbadane. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/pl/data-broker-removals.md b/i18n/pl/data-broker-removals.md index 3b1f2b87..1fa6f106 100644 --- a/i18n/pl/data-broker-removals.md +++ b/i18n/pl/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/pl/desktop-browsers.md b/i18n/pl/desktop-browsers.md index 2e763de9..d5708edb 100644 --- a/i18n/pl/desktop-browsers.md +++ b/i18n/pl/desktop-browsers.md @@ -181,9 +181,11 @@ Chroni to przed trwałymi ciasteczkami, choć nie zabezpiecza przed tymi, które ##### Telemetria -- [ ] Odznacz **Wysyłanie danych technicznych i o interakcjach do Mozilli** -- [ ] Odznacz **Instalowanie i przeprowadzanie badań** -- [ ] Odznacz **Automatyczne wysyłanie zgłoszeń awarii** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** Zgodnie z polityką prywatności Mozilli dla Firefoksa: @@ -227,7 +229,7 @@ Tryb Maksymalnej ochrony wymusza korzystanie z DNS poprzez HTTPS. W przypadku, g
-[Projekt Arkenfox](https://github.com/arkenfox/user.js) dostarcza zestaw starannie dobranych ustawień dla Firefoksa. Jeśli [zdecydujesz się](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) korzystać z Arkenfox, [niektóre opcje](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) mogą być subiektywnie zbyt restrykcyjne lub powodować problemy z działaniem niektórych stron — co możesz [łatwo dostosować](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) według własnych potrzeb. **Zdecydowanie zalecamy** zapoznanie się z ich pełnym [wiki](https://github.com/arkenfox/user.js/wiki) projektu. Arkenfox włącza także obsługę [kontenerów](https://support.mozilla.org/pl/kb/containers#w_for-advanced-users). +[Projekt Arkenfox](https://github.com/arkenfox/user.js) dostarcza zestaw starannie dobranych ustawień dla Firefoksa. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. **Zdecydowanie zalecamy** zapoznanie się z ich pełnym [wiki](https://github.com/arkenfox/user.js/wiki) projektu. Arkenfox włącza także obsługę [kontenerów](https://support.mozilla.org/pl/kb/containers#w_for-advanced-users). Arkenfox ma na celu jedynie utrudnienie działania podstawowych lub prostych skryptów śledzących poprzez losową zmianę zawartości elementów graficznych (tzw. canvas) i użycie wbudowanych ustawień Firefoksa związanych z odpornością na identyfikację. Nie ma on jednak na celu ujednolicenia odcisku przeglądarki z dużą grupą innych użytkowników Arkenfoxa — tak jak robi to przeglądarka Mullvad czy Tor Browser — co jest jedyną skuteczną metodą ochrony przed zaawansowanym śledzeniem odcisku przeglądarki. Warto pamiętać, że zawsze można używać kilku przeglądarek, na przykład Firefox z Arkenfoxem do kilku witryn, na których chcesz pozostać zalogowany lub którym ufasz, a przeglądarkę Mullvad do ogólnego przeglądania internetu. diff --git a/i18n/pl/encryption.md b/i18n/pl/encryption.md index 42c364cc..a19d6ca6 100644 --- a/i18n/pl/encryption.md +++ b/i18n/pl/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Porada

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/pl/frontends.md b/i18n/pl/frontends.md index 1a1268a2..0a5b2de9 100644 --- a/i18n/pl/frontends.md +++ b/i18n/pl/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Ostrzeżenie

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/pl/tools.md b/i18n/pl/tools.md index 061a866f..0da28ac1 100644 --- a/i18n/pl/tools.md +++ b/i18n/pl/tools.md @@ -455,14 +455,13 @@ Do szyfrowania dysku z systemem operacyjnym zwykle zalecamy użycie narzędzia s
-- ![Logo Redlib](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit; w przeglądarce)](frontends.md#redlib) -- ![Logo ProxiTok](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok; w przeglądarce)](frontends.md#proxitok) -- ![Logo FreeTube](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube; aplikacja komputerowa)](frontends.md#freetube) -- ![Logo Yattee](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) -- ![Logo LibreTube](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![Logo LibreTube](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube; Android)](frontends.md#libretube-android) -- ![Logo NewPipe](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube; Android)](frontends.md#newpipe-android) -- ![Logo Invidious](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Logo Invidious](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube; w przeglądarce)](frontends.md#invidious) -- ![Logo Piped](assets/img/frontends/piped.svg){ .twemoji loading=lazy } [Piped (YouTube; w przeglądarce)](frontends.md#piped) +- ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) +- ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) +- ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) +- ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) +- ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) +- ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) +- ![Piped logo](assets/img/frontends/piped.svg){ .twemoji loading=lazy } [Piped (YouTube, Web)](frontends.md#piped)
diff --git a/i18n/pt-BR/browser-extensions.md b/i18n/pt-BR/browser-extensions.md index 47644f84..257009e6 100644 --- a/i18n/pt-BR/browser-extensions.md +++ b/i18n/pt-BR/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Deve afetar diretamente a privacidade do usuário, ou seja, não deve simplesmente fornecer informações. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/pt-BR/data-broker-removals.md b/i18n/pt-BR/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/pt-BR/data-broker-removals.md +++ b/i18n/pt-BR/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/pt-BR/desktop-browsers.md b/i18n/pt-BR/desktop-browsers.md index 57317f03..3ba66793 100644 --- a/i18n/pt-BR/desktop-browsers.md +++ b/i18n/pt-BR/desktop-browsers.md @@ -184,9 +184,11 @@ Isso te protege contra cookies persistentes, mas não contra cookies adquiridos ##### Telemetria -- Limpar **Permitir que o Firefox envie dados técnicos e de interação para o Mozilla** -- Limpar **Permitir que o Firefox instale e execute estudos** -- Limpar **Permitir que o Firefox envie relatórios de falhas identificadas em seu nome** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** De acordo com a política de privacidade do Firefox da Mozilla, @@ -230,7 +232,7 @@ A Proteção Máxima impõe o uso de DNS sobre HTTPS, e um aviso de segurança s
-O [projeto Arkenfox](https://github.com/arkenfox/user.js) oferece um conjunto de opções cuidadosamente selecionadas para o Firefox. Se você [decidir](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) usar o Arkenfox, [algumas opções](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) podem ser subjetivamente rígidas e/ou fazer com que alguns sites não funcionem corretamente — algo que você pode [ajustar facilmente](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) conforme suas necessidades. Nós **recomendamos fortemente** que você leia a [wiki completa](https://github.com/arkenfox/user.js/wiki) deles. . +O [projeto Arkenfox](https://github.com/arkenfox/user.js) oferece um conjunto de opções cuidadosamente selecionadas para o Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. Nós **recomendamos fortemente** que você leia a [wiki completa](https://github.com/arkenfox/user.js/wiki) deles. . Arkenfox é uma alternativa de software focada impedir que scripts básicos vazem seus dados ou estabaleca alguma espécie de rastreamento. Através da aleatorização do *canvas* do navegador o Arkenfox evita que esses scripts pegue as suas 'impressões digitais'. O foco deste navegador não é camuflar sua conexão através de uma gama de usuários com configurações similares, da mesma forma que o Navegador Tor ou o Mullvad. A maneira citada ainda continua sendo a melhor forma de evitar o rastreamento dos seus dados e evitar scripts consigam suas 'impressões digitais' Lembre-se sempre que você pode usar diversos navegadores para finalidades distintas. Por exemplo, você pode usar uma combinação de navegadores como Firefox+Arkenfox para permanecer logado em sites e serviços que você utiliza frequentemente, juntamente ao uso de um navegador mais focado em privacidade (Tor, Mullvad, etc.) para navegação geralizada. diff --git a/i18n/pt-BR/encryption.md b/i18n/pt-BR/encryption.md index 7d488531..a94660ec 100644 --- a/i18n/pt-BR/encryption.md +++ b/i18n/pt-BR/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/pt-BR/frontends.md b/i18n/pt-BR/frontends.md index 90f386d4..bcc91793 100644 --- a/i18n/pt-BR/frontends.md +++ b/i18n/pt-BR/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Aviso

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/pt-BR/tools.md b/i18n/pt-BR/tools.md index 9ce7c849..020f59bc 100644 --- a/i18n/pt-BR/tools.md +++ b/i18n/pt-BR/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/pt/browser-extensions.md b/i18n/pt/browser-extensions.md index f5c22398..9ebc366b 100644 --- a/i18n/pt/browser-extensions.md +++ b/i18n/pt/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ As listas de filtros adicionais tornam as coisas mais lentas e podem aumentar a - Deve ter um impacto direto na privacidade do utilizador, ou seja, não deve limitar-se a fornecer informações. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/pt/data-broker-removals.md b/i18n/pt/data-broker-removals.md index 50154131..79d89b1e 100644 --- a/i18n/pt/data-broker-removals.md +++ b/i18n/pt/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/pt/desktop-browsers.md b/i18n/pt/desktop-browsers.md index 013527c6..f32ab1dd 100644 --- a/i18n/pt/desktop-browsers.md +++ b/i18n/pt/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Recolha de dados e utilização do Firefox -- [ ] Desmarque **Permitir que o Firefox envie dados técnicos e de interação para o Mozilla** -- [ ] Desmarque **Permitir ao Firefox instalar e executar estudos** -- [ ] Desmarque **Permitir que o Firefox envie relatórios de falhas acumuladas em seu nome** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/pt/encryption.md b/i18n/pt/encryption.md index d2ce7c2d..e7272e8d 100644 --- a/i18n/pt/encryption.md +++ b/i18n/pt/encryption.md @@ -95,6 +95,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -109,47 +117,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powerhell Get-Disk 0 | findstr GPT && echo Este é um disco do sistema GPT! - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Feche o prompt de comando, e entre no PowerShell: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/pt/frontends.md b/i18n/pt/frontends.md index 15279e2f..6fef21c4 100644 --- a/i18n/pt/frontends.md +++ b/i18n/pt/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( Por predefinição, o FreeTube bloqueia todos os anúncios do YouTube. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -Por predefinição, o Yattee bloqueia todos os anúncios do YouTube. Além disso, o Yattee integra-se opcionalmente com [SponsorBlock](https://sponsor.ajay.app) para o ajudar a saltar segmentos de vídeo patrocinados. - ### LibreTube (Android)
diff --git a/i18n/pt/tools.md b/i18n/pt/tools.md index fad3e646..0a8872c5 100644 --- a/i18n/pt/tools.md +++ b/i18n/pt/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/ru/browser-extensions.md b/i18n/ru/browser-extensions.md index 034a4bb5..74b63fe3 100644 --- a/i18n/ru/browser-extensions.md +++ b/i18n/ru/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfort - Должны непосредственно влиять на конфиденциальность пользователя, т.е. не просто предоставлять информацию. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/ru/data-broker-removals.md b/i18n/ru/data-broker-removals.md index 4acb1bd0..f7d13f54 100644 --- a/i18n/ru/data-broker-removals.md +++ b/i18n/ru/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/ru/desktop-browsers.md b/i18n/ru/desktop-browsers.md index 4fd02648..0809b31d 100644 --- a/i18n/ru/desktop-browsers.md +++ b/i18n/ru/desktop-browsers.md @@ -181,9 +181,11 @@ Firefox добавляет уникальный [маркер загрузки]( ##### Сбор и использование данных Firefox -- [ ] Отключите **Разрешить Firefox отправлять технические данные и данные взаимодействия в Mozilla** -- [ ] Отключите **Разрешить Firefox устанавливать и проводить исследования** -- [ ] Отключите **Разрешить Firefox отправлять от вашего имени накопившиеся сообщения о его падениях** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** Согласно политике конфиденциальности Mozilla для Firefox, @@ -227,7 +229,7 @@ Firefox добавляет уникальный [маркер загрузки](
-[Проект Arkenfox](https://github.com/arkenfox/user.js) предоставляет набор тщательно продуманных параметров для Firefox. Если вы [решите](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) использовать Arkenfox, [несколько опций](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Общие]) являются субъективно строгими и/или могут привести к некорректной работе некоторых веб-сайтов — их можно [легко изменить](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) в соответствии с вашими потребностями. Мы **настоятельно рекомендуем** ознакомиться с их полной [вики](https://github.com/arkenfox/user.js/wiki). Arkenfox также включает поддержку [контейнеров](https://support.mozilla.org/kb/containers#w_for-advanced-users). +[Проект Arkenfox](https://github.com/arkenfox/user.js) предоставляет набор тщательно продуманных параметров для Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. Мы **настоятельно рекомендуем** ознакомиться с их полной [вики](https://github.com/arkenfox/user.js/wiki). Arkenfox также включает поддержку [контейнеров](https://support.mozilla.org/kb/containers#w_for-advanced-users). Arkenfox стремится только предотвратить базовые или примитивные отслеживающие скрипты через рандомизацию canvas и встроенные в Firefox настройки сопротивления снятию цифровых отпечатков. Он не стремится сделать ваш браузер неотличимым от большой группы других пользователей Arkenfox так, как это делают браузер Mullvad или Tor Browser, что является единственным способом противодействия продвинутым скриптам отслеживания по цифровым отпечаткам. Не забывайте о возможности использовать разные браузеры. К примеру, Firefox+Arkenfox можно применять для доверенных сайтов, где вам нужно сохранять авторизацию, а браузер Mullvad — для повседневного интернет-серфинга. diff --git a/i18n/ru/encryption.md b/i18n/ru/encryption.md index a59bb7f7..7957febc 100644 --- a/i18n/ru/encryption.md +++ b/i18n/ru/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Откройте командную строку и проверьте формат таблицы разделов диска с помощью следующей команды. Вы должны увидеть "**GPT**" в разделе "Стиль раздела": - - ```powershell - powershell Get-Disk - ``` - -2. Выполните эту команду (в командной строке от имени администратора), чтобы проверить версию вашего TPM. Вы должны увидеть `2.0` или `1.2`, перечисленные рядом с `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). Необходимо перезагрузиться, нажав клавишу F8 до запуска Windows, и перейти в *командную строку* в разделе **Устранение неполадок** → **Дополнительные параметры** → **Командная строка**. -4. Войдите под учетной записью администратора и введите следующее для запуска шифрования: - - ```powershell - manage-bde -on c: -used - ``` - -5. Закройте командную строку и продолжите обычную загрузку в Windows. -6. Откройте командную строку от имени администратора и выполните следующие команды: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- - Создайте резервную копию файла `BitLocker-Recovery-Key.txt` с рабочего стола на отдельном устройстве хранения данных. Потеря этого кода восстановления может привести к потере данных. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/ru/frontends.md b/i18n/ru/frontends.md index 8f2bf902..0e17dcef 100644 --- a/i18n/ru/frontends.md +++ b/i18n/ru/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( По умолчанию FreeTube блокирует всю рекламу YouTube. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Предупреждение

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -По умолчанию Yattee блокирует всю рекламу на YouTube. Кроме того, Yattee опционально интегрируется с [SponsorBlock](https://sponsor.ajay.app), чтобы помочь вам пропускать спонсируемые сегменты видео. - ### LibreTube (Android)
diff --git a/i18n/ru/tools.md b/i18n/ru/tools.md index 1f46e577..a4cfe3e3 100644 --- a/i18n/ru/tools.md +++ b/i18n/ru/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/sv/browser-extensions.md b/i18n/sv/browser-extensions.md index 9aa36c8c..8c185984 100644 --- a/i18n/sv/browser-extensions.md +++ b/i18n/sv/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Ytterligare filterlistor saktar ner saker och kan öka din attackyta, så använ - Måste direkt påverka användarens integritet, det vill säga får inte bara ge information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/sv/data-broker-removals.md b/i18n/sv/data-broker-removals.md index 791087a7..d8d9db00 100644 --- a/i18n/sv/data-broker-removals.md +++ b/i18n/sv/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/sv/desktop-browsers.md b/i18n/sv/desktop-browsers.md index 2781ba91..2cb8446b 100644 --- a/i18n/sv/desktop-browsers.md +++ b/i18n/sv/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/sv/encryption.md b/i18n/sv/encryption.md index 274e6a4b..ce23e59c 100644 --- a/i18n/sv/encryption.md +++ b/i18n/sv/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Öppna en kommandotolk och kontrollera enhetens partitionstabellformat med följande kommando. Du bör se "**GPT**" listad under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Kör det här kommandot (i en administratörskommandotolk) för att kontrollera din TPM-version. Du bör se `2.0` eller `1.2` bredvid `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). Du måste starta om och samtidigt trycka på F8-tangenten innan Windows startar och gå in i kommandotolken ** i **Felsökning** → **Avancerade alternativ** → **Kommandotolk**. -4. Logga in med ditt administratörskonto och skriv detta i kommandotolken för att starta kryptering: - - ```powershell - manage-bde -on c: -used - ``` - -5. Stäng kommandotolken och fortsätt att starta upp till vanligt Windows. -6. Öppna en administratörskommandotolk och kör följande kommandon: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Säkerhetskopiera `BitLocker-Recovery-Key.txt` på skrivbordet till en separat lagringsenhet. Förlust av denna återställningskod kan leda till förlust av data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/sv/frontends.md b/i18n/sv/frontends.md index f08be0ef..e28a4cf6 100644 --- a/i18n/sv/frontends.md +++ b/i18n/sv/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Varning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/sv/tools.md b/i18n/sv/tools.md index 7c22c549..3eaf236a 100644 --- a/i18n/sv/tools.md +++ b/i18n/sv/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/tr/browser-extensions.md b/i18n/tr/browser-extensions.md index 45e00e5b..36e2d429 100644 --- a/i18n/tr/browser-extensions.md +++ b/i18n/tr/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/tr/data-broker-removals.md b/i18n/tr/data-broker-removals.md index 4538b13e..c1d80504 100644 --- a/i18n/tr/data-broker-removals.md +++ b/i18n/tr/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/tr/desktop-browsers.md b/i18n/tr/desktop-browsers.md index 04da77f6..b61b66c8 100644 --- a/i18n/tr/desktop-browsers.md +++ b/i18n/tr/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/tr/encryption.md b/i18n/tr/encryption.md index 36b3f7ba..73aa2703 100644 --- a/i18n/tr/encryption.md +++ b/i18n/tr/encryption.md @@ -95,6 +95,14 @@ TrueCrypt [birçok kez denetlenmiştir](https://en.wikipedia.org/wiki/TrueCrypt# Yerleşik işletim sistemi şifreleme çözümleri genellikle [güvenli](basics/hardware.md#tpmsecure-cryptoprocessor) bir [kripto işlemci](basics/hardware.md#tpmsecure-cryptoprocessor) gibi donanım güvenliği özelliklerinden yararlanır. Bu nedenle, işletim sisteminiz için yerleşik şifreleme çözümlerini kullanmanızı öneririz. Platformlar arası şifreleme için, daha fazla esneklik sağlamak ve satıcı kilitlenmesini önlemek için yine de platformlar [arası araçları](#multi-platform) öneriyoruz. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -109,47 +117,9 @@ Yerleşik işletim sistemi şifreleme çözümleri genellikle [güvenli](basics/
-BitLocker, Windows'un Pro, Enterprise ve Education sürümlerinde [resmi olarak desteklenmektedir](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838). Aşağıdaki önkoşulları karşılamaları koşuluyla Ev sürümlerinde etkinleştirilebilir. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Windows Home'da BitLocker'ı Etkinleştirme - -Windows'un "Home" sürümlerinde BitLocker'ı etkinleştirmek için [GUID Bölümleme Tablosu](https://en.wikipedia.org/wiki/GUID_Partition_Table) ile biçimlendirilmiş bölümlere ve özel bir TPM (v1.2, 2.0+) modülüne sahip olmanız gerekir. Bu kılavuzu izlemeden önce cihazınızda zaten etkinse [, Bitlocker olmayan "Cihaz şifreleme" işlevini](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (kurtarma anahtarınızı Microsoft'un sunucularına gönderdiği için daha düşüktür) devre dışı bırakmanız gerekebilir. - -1. Bir komut istemi açın ve aşağıdaki komutla sürücünüzün bölümleme tablosu biçimini kontrol edin. "Bölümleme Stili" altında**"GPT**"nin listelendiğini görmelisiniz: - - ```powershell - powershell Get-Disk - ``` - -2. TPM sürümünüzü kontrol etmek için bu komutu çalıştırın (bir yönetici komut isteminde). `SpecVersion`'ın yanında listelenen `2.0` veya `1.2` 'yi görmelisiniz: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/tr/frontends.md b/i18n/tr/frontends.md index a6c6dfe1..0f2b35a9 100644 --- a/i18n/tr/frontends.md +++ b/i18n/tr/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/tr/tools.md b/i18n/tr/tools.md index 78ed48dc..20aad8b2 100644 --- a/i18n/tr/tools.md +++ b/i18n/tr/tools.md @@ -454,7 +454,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/uk/browser-extensions.md b/i18n/uk/browser-extensions.md index 2a6b11f2..88d1edd7 100644 --- a/i18n/uk/browser-extensions.md +++ b/i18n/uk/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/uk/data-broker-removals.md b/i18n/uk/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/uk/data-broker-removals.md +++ b/i18n/uk/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/uk/desktop-browsers.md b/i18n/uk/desktop-browsers.md index b440f631..495a0e28 100644 --- a/i18n/uk/desktop-browsers.md +++ b/i18n/uk/desktop-browsers.md @@ -181,9 +181,11 @@ Firefox включає унікальний [маркер завантаженн ##### Телеметрія -- [ ] Зніміть прапорець **Надсилати технічні й аналітичні дані до Mozilla** -- [ ] Зніміть прапорець **Встановлювати й запускати дослідження** -- [ ] Зніміть прапорець **Автоматично надсилати звіти про збої** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** Згідно з політикою конфіденційності Mozilla для Firefox, @@ -227,7 +229,7 @@ Firefox включає унікальний [маркер завантаженн
-[Проєкт Arkenfox](https://github.com/arkenfox/user.js) надає набір ретельно продуманих налаштувань для Firefox. Якщо ви [вирішите](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) використовувати Arkenfox, [деякі параметри](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) є суб'єктивно суворими та/або можуть призвести до неправильної роботи деяких вебсайтів, які ви можете [легко змінити](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) відповідно до ваших потреб. Ми **наполегливо рекомендуємо** прочитати їхню повну [вікі-сторінку](https://github.com/arkenfox/user.js/wiki). Arkenfox також забезпечує підтримку [контейнерів](https://support.mozilla.org/kb/containers#w_for-advanced-users). +[Проєкт Arkenfox](https://github.com/arkenfox/user.js) надає набір ретельно продуманих налаштувань для Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. Ми **наполегливо рекомендуємо** прочитати їхню повну [вікі-сторінку](https://github.com/arkenfox/user.js/wiki). Arkenfox також забезпечує підтримку [контейнерів](https://support.mozilla.org/kb/containers#w_for-advanced-users). Arkenfox має на меті лише перешкоджати базовим або простим скриптам відстеження за допомогою рандомізації вбудованих у Firefox налаштувань захисту від відбитків. Він не має на меті змусити ваш браузер злитися з великим натовпом інших користувачів Arkenfox так само, як це роблять Mullvad Browser або Tor Browser, що є єдиним способом перешкодити просунутим скриптам відстеження цифрових відбитків. Пам'ятайте, що ви завжди можете використовувати кілька браузерів, наприклад, ви можете використовувати Firefox+Arkenfox для кількох сайтів, на яких ви хочете залишатися в системі або яким ви довіряєте, і Mullvad Browser для загального перегляду. diff --git a/i18n/uk/encryption.md b/i18n/uk/encryption.md index e5ba4575..ca607b79 100644 --- a/i18n/uk/encryption.md +++ b/i18n/uk/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/uk/frontends.md b/i18n/uk/frontends.md index bda7e352..5eb9e600 100644 --- a/i18n/uk/frontends.md +++ b/i18n/uk/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Попередження

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/uk/tools.md b/i18n/uk/tools.md index 4f7eaed3..3ebf68b8 100644 --- a/i18n/uk/tools.md +++ b/i18n/uk/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/vi/browser-extensions.md b/i18n/vi/browser-extensions.md index 4057ece6..5afc5828 100644 --- a/i18n/vi/browser-extensions.md +++ b/i18n/vi/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - Must directly impact user privacy, i.e. must not simply provide information. [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/vi/data-broker-removals.md b/i18n/vi/data-broker-removals.md index 50154131..79d89b1e 100644 --- a/i18n/vi/data-broker-removals.md +++ b/i18n/vi/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/vi/desktop-browsers.md b/i18n/vi/desktop-browsers.md index b1b22a45..342ccc54 100644 --- a/i18n/vi/desktop-browsers.md +++ b/i18n/vi/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] Uncheck **Allow Firefox to send technical and interaction data to Mozilla** -- [ ] Uncheck **Allow Firefox to install and run studies** -- [ ] Uncheck **Allow Firefox to send backlogged crash reports on your behalf** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/vi/encryption.md b/i18n/vi/encryption.md index b6af3e3f..4b88bf89 100644 --- a/i18n/vi/encryption.md +++ b/i18n/vi/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/vi/frontends.md b/i18n/vi/frontends.md index 02edf7db..471a8bdb 100644 --- a/i18n/vi/frontends.md +++ b/i18n/vi/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

Warning

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/vi/tools.md b/i18n/vi/tools.md index 8745eb35..6b100856 100644 --- a/i18n/vi/tools.md +++ b/i18n/vi/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) diff --git a/i18n/zh-Hant/browser-extensions.md b/i18n/zh-Hant/browser-extensions.md index 4fab12ff..f6714e47 100644 --- a/i18n/zh-Hant/browser-extensions.md +++ b/i18n/zh-Hant/browser-extensions.md @@ -50,11 +50,11 @@ cover: browser-extensions.webp ### uBlock Origin Lite -uBlock Origin 還有一個「Lite」版本，與原始版相比，其功能集非常有限。 但比之成熟的姊妹產品它具有一些明顯優勢值得考慮，如果... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. 但比之成熟的姊妹產品它具有一些明顯優勢值得考慮，如果... - ...不想對擴充功能授予完整的「讀取/修改網站資料」權限（即使是像 uBlock Origin 這樣受信任的擴充功能） - ....想要一個資源（記憶體/CPU）利用更高效的內容攔截器[^1] -- ...瀏覽器只能支援 Manifest V3 擴展。 +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin 還有一個「Lite」版本，與原始版相比，其功能集
-若不想更改過濾器列表，我們僅推薦此版本的 uBlock Origin，因為它僅支援一些預先選擇的列表，且不提供其他自訂選項，包括手動選擇要封鎖的元素的功能。 這些限制是由於 Manifest V3 設計之故。 +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] 此版本提供三種封鎖等級：「基本」等級不需要任何特殊權限即可查看和修改網站內容，而「最佳」和「完整」等級確實需要廣泛的權限，但透過附加裝飾規則提供更好的過濾體驗和腳本注入。 @@ -88,7 +88,7 @@ uBlock Origin Lite 僅在擴充功能從瀏覽器的附加元件市場更新時 ### AdGuard -我們建議 iOS 使用者使用 [Safari](mobile-browsers.md#safari-ios) ，遺憾的是 uBlock Origin 並不支援它。 幸運的是，AdGuard 能作為適當的替代方案： +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. 幸運的是，AdGuard 能作為適當的替代方案：
@@ -118,3 +118,7 @@ uBlock Origin Lite 僅在擴充功能從瀏覽器的附加元件市場更新時 - 必須直接影響用戶隱私，即不得簡單地提供資訊。 [^1]: uBlock Origin Lite **本身**不會消耗任何資源，因為它使用更新的API，瀏覽器能夠本地處理過濾器列表，而不是在擴充功能中執行JavaScript 程式碼來處理過濾。 然而，這種資源優勢僅止於 [理論](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo)，因為標準uBlock Origin 的過濾程式碼可能比瀏覽器的本機過濾程式碼更有效。 目前尚未對此進行基準測試。 + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/zh-Hant/data-broker-removals.md b/i18n/zh-Hant/data-broker-removals.md index dd449884..378b7376 100644 --- a/i18n/zh-Hant/data-broker-removals.md +++ b/i18n/zh-Hant/data-broker-removals.md @@ -32,7 +32,6 @@ cover: data-broker-removals.webp - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople（ [搜尋](https://checkpeople.com/do-not-sell-info) ，發現資料後選擇 _Remove Record_ 即可） - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/zh-Hant/desktop-browsers.md b/i18n/zh-Hant/desktop-browsers.md index c7894073..39666a9a 100644 --- a/i18n/zh-Hant/desktop-browsers.md +++ b/i18n/zh-Hant/desktop-browsers.md @@ -181,9 +181,11 @@ If you want to stay logged in to particular sites, you can allow exceptions in * ##### 遙測 -- [ ] 取消勾選 **允許 Firefox 傳送技術與互動資料給 Mozilla** -- [ ] 取消勾選 **允許 Firefox 安裝並進行研究** -- [ ] 取消勾選 **允許 Firefox 以您的身分自動回報錯誤報告** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** 根據 Mozilla 的 Firefox 隱私權政策： @@ -227,7 +229,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/zh-Hant/encryption.md b/i18n/zh-Hant/encryption.md index 09ac9bc7..d88c496c 100644 --- a/i18n/zh-Hant/encryption.md +++ b/i18n/zh-Hant/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru 作業系統內建的加密方案通常會利用硬體安全功能，例如：[安全加密協處理器](basics/hardware.md#tpmsecure-cryptoprocessor)。 因此，我們建議您使用作業系統內建的加密方案。 對於跨平台加密，我們仍建議使用 [跨平台工具](#multi-platform) ，以獲得額外的靈活性，並避免供應商鎖定。 +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru
-Windows 的專業版、企業版和教育版均[正式支援](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) BitLocker。 只要符合下列先決條件，即可在家庭版上啟用。 +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Windows Home上啓用BitLocker - -若要在 Windows 家用版啟用 BitLocker ，必須使用 [GUID 分割表](https://en.wikipedia.org/wiki/GUID_Partition_Table) 格式化的分割區，並且具有專用的TPM (v1.2, 2.0+)模組。 如果在遵循本指南之前已在裝置上啟用，則要[停用非Bitlocker「裝置加密」功能](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5)](因為它會將您的復原金鑰傳送到Microsoft 的伺服器)。 - -1. 開啟命令提示符，並使用以下命令檢查磁碟機的分區表格格式。 您應該會在“分區樣式”下方看到“**GPT**” ： - - ```powershell - powershell Get-Disk - ``` - -2. 在管理員命令提示符中執行此命令以檢查您的TPM版本。 您應該會在 `個SpecVersion`旁邊看到 `2.0` 或 `1.2` ： - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. 造訪[進階啟動選項](https://support.microsoft.com/windows/advanced-startup-options-include-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617)。 重新啟動時需要在 Windows 啟動前按下F8 鍵，然後進入 *命令提示字元* in **疑難排解** → **進階選項** → **命令提字元**。 -4. 使用管理員帳戶登入並在命令提示符中輸入指令以開始加密： - - ```powershell - manage-bde -on c: -used - ``` - -5. 關閉命令提示符並繼續啟動正常Windows。 -6. 打開 admin 命令提示符並運行以下命令： - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

溫馨提示

- -將桌面上的「BitLocker-Recovery-Key.txt」備份到單獨的儲存裝置。 若遺失恢復代碼可能會導致資料無法回復。 - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/zh-Hant/frontends.md b/i18n/zh-Hant/frontends.md index 325d3a64..f8c8c0bd 100644 --- a/i18n/zh-Hant/frontends.md +++ b/i18n/zh-Hant/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your subscription list, playlists, watch history and search 預設情況下， FreeTube 會封鎖所有 YouTube 廣告。 此外，FreeTube 可與 [SponsorBlock](https://sponsor.ajay.app) 整合，幫助您跳過影片中的贊助片段。 -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** 是 iOS、tvOS 和 macOS 適用於 [YouTube](https://youtube.com) 的自由、開放原始碼、以隱私為重點的影片播放器。 由於 App Store 的限制，您需要採取一些 [額外步驟](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) ，才能使用 Yattee 觀看 YouTube。 Yattee 允許您連線到 [Invidious](#invidious) 或 [Piped](#piped) 的實例。 - -使用 Yattee 時，您的訂閱清單會儲存在本機裝置上。 - -[:octicons-home-16: 首頁](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="隱私權政策" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="說明文件" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="原始碼" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="捐款" } - -
-下載 - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

警告

- -使用 Yattee 時，您的 IP位址 可能仍會被 YouTube、 [Invidious](https://instances.invidious.io) 、 [Piped](https://github.com/TeamPiped/Piped/wiki/Instances) 或 [SponsorBlock](https://sponsor.ajay.app) 所知曉，具體取決於您的設定。 如果您的 [威脅模型](basics/threat-modeling.md) 需要隱藏您的IP 位址，請考慮使用 [VPN](vpn.md) 或 [Tor](tor.md)。 - -
- -預設情況下， Yattee 會封鎖所有 YouTube 廣告。 此外， Yattee 可選擇與 [SponsorBlock](https://sponsor.ajay.app) 整合，可以跳過贊助的影片段。 - ### LibreTube (Android)
diff --git a/i18n/zh-Hant/tools.md b/i18n/zh-Hant/tools.md index 80807810..dafac838 100644 --- a/i18n/zh-Hant/tools.md +++ b/i18n/zh-Hant/tools.md @@ -455,14 +455,13 @@ For encrypting your OS drive, we typically recommend using the encryption tool y
-- ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib（Reddit，網頁版）](frontends.md#redlib) -- ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok（TikTok，網頁版）](frontends.md#proxitok) -- ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube（YouTube，電腦版）](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee（YouTube，iOS、tvOS、macOS版）](frontends.md#yattee) -- ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube（YouTube，Android 版）](frontends.md#libretube-android) -- ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe（YouTube，Android 版）](frontends.md#newpipe-android) -- ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious（YouTube，網頁版）](frontends.md#invidious) -- ![Piped logo](assets/img/frontends/piped.svg){ .twemoji loading=lazy } [Piped（YouTube，網頁版）](frontends.md#piped) +- ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) +- ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) +- ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) +- ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) +- ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) +- ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) +- ![Piped logo](assets/img/frontends/piped.svg){ .twemoji loading=lazy } [Piped (YouTube, Web)](frontends.md#piped)
diff --git a/i18n/zh-TW/browser-extensions.md b/i18n/zh-TW/browser-extensions.md index 35aa7d6e..aaf729e6 100644 --- a/i18n/zh-TW/browser-extensions.md +++ b/i18n/zh-TW/browser-extensions.md @@ -50,11 +50,11 @@ cover: browser-extensions.webp ### uBlock Origin Lite -uBlock Origin 還有一個「Lite」版本，與原始版相比，其功能集非常有限。 但比之成熟的姊妹產品它具有一些明顯優勢值得考慮，如果... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. 但比之成熟的姊妹產品它具有一些明顯優勢值得考慮，如果... - ...不想對擴充功能授予完整的「讀取/修改網站資料」權限（即使是像 uBlock Origin 這樣受信任的擴充功能） - ....想要一個資源（記憶體/CPU）利用更高效的內容攔截器[^1] -- ...瀏覽器只能支援 Manifest V3 擴展。 +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin 還有一個「Lite」版本，與原始版相比，其功能集
-若不想更改過濾器列表，我們僅推薦此版本的 uBlock Origin，因為它僅支援一些預先選擇的列表，且不提供其他自訂選項，包括手動選擇要封鎖的元素的功能。 這些限制是由於 Manifest V3 設計之故。 +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] 此版本提供三種封鎖等級：「基本」等級不需要任何特殊權限即可查看和修改網站內容，而「最佳」和「完整」等級確實需要廣泛的權限，但透過附加裝飾規則提供更好的過濾體驗和腳本注入。 @@ -88,7 +88,7 @@ uBlock Origin Lite 僅在擴充功能從瀏覽器的附加元件市場更新時 ### AdGuard -我們建議 iOS 使用者使用 [Safari](mobile-browsers.md#safari-ios) ，遺憾的是 uBlock Origin 並不支援它。 幸運的是，AdGuard 能作為適當的替代方案： +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. 幸運的是，AdGuard 能作為適當的替代方案：
@@ -118,3 +118,7 @@ uBlock Origin Lite 僅在擴充功能從瀏覽器的附加元件市場更新時 - 必須直接影響用戶隱私，即不得簡單地提供資訊。 [^1]: uBlock Origin Lite **本身**不會消耗任何資源，因為它使用更新的API，瀏覽器能夠本地處理過濾器列表，而不是在擴充功能中執行JavaScript 程式碼來處理過濾。 然而，這種資源優勢僅止於 [理論](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo)，因為標準uBlock Origin 的過濾程式碼可能比瀏覽器的本機過濾程式碼更有效。 目前尚未對此進行基準測試。 + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/zh-TW/data-broker-removals.md b/i18n/zh-TW/data-broker-removals.md index 0be1617d..f5fbea56 100644 --- a/i18n/zh-TW/data-broker-removals.md +++ b/i18n/zh-TW/data-broker-removals.md @@ -32,7 +32,6 @@ cover: data-broker-removals.webp - BeenVerified（[搜尋](https://beenverified.com/app/optout/search)、 [退出](https://beenverified.com/app/optout/address-search)） - CheckPeople（ [搜尋](https://checkpeople.com/do-not-sell-info) ，發現資料後選擇 _Remove Record_ 即可） - ClustrMaps（[搜尋](https://clustrmaps.com)、 [退出](https://clustrmaps.com/bl/opt-out)） -- Dataveria（[搜尋](https://dataveria.com)、[退出](https://dataveria.com/ng/control/privacy)） - InfoTracer（[搜尋](https://infotracer.com)、[退出](https://infotracer.com/optout)） - Intelius（[搜尋](https://intelius.com)、[退出](https://suppression.peopleconnect.us/login)） - PeekYou（[搜尋](https://peekyou.com)、[退出](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)） diff --git a/i18n/zh-TW/desktop-browsers.md b/i18n/zh-TW/desktop-browsers.md index 2e94148d..9f5dfbdb 100644 --- a/i18n/zh-TW/desktop-browsers.md +++ b/i18n/zh-TW/desktop-browsers.md @@ -181,9 +181,11 @@ Firefox 在 Mozilla 網站的下載中包含一個獨特的 [下載令牌](https ##### 遙測 -- [ ] 取消勾選 **允許 Firefox 傳送技術與互動資料給 Mozilla** -- [ ] 取消勾選 **允許 Firefox 安裝並進行研究** -- [ ] 取消勾選 **允許 Firefox 以您的身分自動回報錯誤報告** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** 根據 Mozilla 的 Firefox 隱私權政策： @@ -227,7 +229,7 @@ Firefox 在 128 版本的更新，新增了一個[尊重隱私的成效測量](h
-[Arkenfox 專案](https://github.com/arkenfox/user.js) 為 Firefox 提供了一套經過仔細考量的設定。 如果您[決定](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not)使用 Arkenfox，有[幾個選項](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common])可能在主觀上會較為嚴格，並且/或者可能導致某些網站無法正常運作，不過您可以[輕鬆的更改](https://github.com/arkenfox/user.js/wiki/3.1-Overrides)這些選項，以滿足您的需求。 我們**強烈建議**完整閱讀其 [Wiki 頁面](https://github.com/arkenfox/user.js/wiki)。 Arkenfox 也啟用了[容器](https://support.mozilla.org/kb/containers#w_for-advanced-users)功能。 +[Arkenfox 專案](https://github.com/arkenfox/user.js) 為 Firefox 提供了一套經過仔細考量的設定。 If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. 我們**強烈建議**完整閱讀其 [Wiki 頁面](https://github.com/arkenfox/user.js/wiki)。 Arkenfox 也啟用了[容器](https://support.mozilla.org/kb/containers#w_for-advanced-users)功能。 Arkenfox 的目標旨在透過 Canvas 隨機化和 Firefox 內建的抗指紋設定來阻止基本或簡單的追蹤腳本。 它的目的不是讓您的瀏覽器與其他許多使用 Arkenfox 的使用者混在一起，那是 Mullvad 瀏覽器或 Tor 瀏覽器的作法，也是阻止進階指紋跟蹤腳本的唯一方法。 請記得，您可以使用多個瀏覽器。例如，您可以考慮在需要保持登入或可以信任的幾個網站使用 Firefox + Arkenfox，而在一般瀏覽時則使用 Mullvad 瀏覽器。 diff --git a/i18n/zh-TW/encryption.md b/i18n/zh-TW/encryption.md index 659b4c9c..da0ea724 100644 --- a/i18n/zh-TW/encryption.md +++ b/i18n/zh-TW/encryption.md @@ -96,6 +96,14 @@ TrueCrypt 已[接受了許多次的稽核](https://en.wikipedia.org/wiki/TrueCry 作業系統內建的加密方案通常會利用硬體安全功能，例如：[安全加密協處理器](basics/hardware.md#tpmsecure-cryptoprocessor)。 因此，我們建議您使用作業系統內建的加密方案。 對於跨平台加密，我們仍建議使用 [跨平台工具](#multi-platform) ，以獲得額外的靈活性，並避免供應商鎖定。 +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ TrueCrypt 已[接受了許多次的稽核](https://en.wikipedia.org/wiki/TrueCry
-Windows 的專業版、企業版和教育版均[正式支援](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) BitLocker。 只要符合下列先決條件，即可在家庭版上啟用。 +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Windows Home上啓用BitLocker - -若要在 Windows 家用版啟用 BitLocker ，必須使用 [GUID 分割表](https://en.wikipedia.org/wiki/GUID_Partition_Table) 格式化的分割區，並且具有專用的TPM (v1.2, 2.0+)模組。 如果在遵循本指南之前已在裝置上啟用，則要[停用非Bitlocker「裝置加密」功能](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5)](因為它會將您的復原金鑰傳送到Microsoft 的伺服器)。 - -1. 開啟命令提示符，並使用以下命令檢查磁碟機的分區表格格式。 您應該會在“分區樣式”下方看到“**GPT**” ： - - ```powershell - powershell Get-Disk - ``` - -2. 在管理員命令提示符中執行此命令以檢查您的TPM版本。 您應該會在 `個SpecVersion`旁邊看到 `2.0` 或 `1.2` ： - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. 造訪[進階啟動選項](https://support.microsoft.com/windows/advanced-startup-options-include-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617)。 重新啟動時需要在 Windows 啟動前按下F8 鍵，然後進入 *命令提示字元* in **疑難排解** → **進階選項** → **命令提字元**。 -4. 使用管理員帳戶登入並在命令提示符中輸入指令以開始加密： - - ```powershell - manage-bde -on c: -used - ``` - -5. 關閉命令提示符並繼續啟動正常Windows。 -6. 打開 admin 命令提示符並運行以下命令： - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

溫馨提示

- -將桌面上的「BitLocker-Recovery-Key.txt」備份到單獨的儲存裝置。 若遺失恢復代碼可能會導致資料無法回復。 - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/zh-TW/frontends.md b/i18n/zh-TW/frontends.md index dd90a6ee..ba7bdbdd 100644 --- a/i18n/zh-TW/frontends.md +++ b/i18n/zh-TW/frontends.md @@ -177,41 +177,6 @@ Piped 需要 JavaScript 才能運行，它有許多公共伺服器。 預設情況下， FreeTube 會封鎖所有 YouTube 廣告。 此外，FreeTube 可與 [SponsorBlock](https://sponsor.ajay.app) 整合，幫助您跳過影片中的贊助片段。 -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** 是 iOS、tvOS 和 macOS 適用於 [YouTube](https://youtube.com) 的自由、開放原始碼、以隱私為重點的影片播放器。 由於 App Store 的限制，您需要採取一些 [額外步驟](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) ，才能使用 Yattee 觀看 YouTube。 Yattee 允許您連線到 [Invidious](#invidious) 或 [Piped](#piped) 的實例。 - -使用 Yattee 時，您的訂閱清單會儲存在本機裝置上。 - -[:octicons-home-16: 首頁](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="隱私權政策" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="說明文件" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="原始碼" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="捐款" } - -
-下載 - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

警告

- -使用 Yattee 時，您的 IP位址 可能仍會被 YouTube、 [Invidious](https://instances.invidious.io) 、 [Piped](https://github.com/TeamPiped/Piped/wiki/Instances) 或 [SponsorBlock](https://sponsor.ajay.app) 所知曉，具體取決於您的設定。 如果您的 [威脅模型](basics/threat-modeling.md) 需要隱藏您的IP 位址，請考慮使用 [VPN](vpn.md) 或 [Tor](tor.md)。 - -
- -預設情況下， Yattee 會封鎖所有 YouTube 廣告。 此外， Yattee 可選擇與 [SponsorBlock](https://sponsor.ajay.app) 整合，可以跳過贊助的影片段。 - ### LibreTube (Android)
diff --git a/i18n/zh-TW/tools.md b/i18n/zh-TW/tools.md index 685aaf07..8103c69b 100644 --- a/i18n/zh-TW/tools.md +++ b/i18n/zh-TW/tools.md @@ -455,14 +455,13 @@ description: Privacy Guides 社群所推薦的隱私工具、服務、軟體及
-- ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib（Reddit，網頁版）](frontends.md#redlib) -- ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok（TikTok，網頁版）](frontends.md#proxitok) -- ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube（YouTube，電腦版）](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee（YouTube，iOS、tvOS、macOS版）](frontends.md#yattee) -- ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube（YouTube，Android 版）](frontends.md#libretube-android) -- ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe（YouTube，Android 版）](frontends.md#newpipe-android) -- ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious（YouTube，網頁版）](frontends.md#invidious) -- ![Piped logo](assets/img/frontends/piped.svg){ .twemoji loading=lazy } [Piped（YouTube，網頁版）](frontends.md#piped) +- ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) +- ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) +- ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) +- ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) +- ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) +- ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious) +- ![Piped logo](assets/img/frontends/piped.svg){ .twemoji loading=lazy } [Piped (YouTube, Web)](frontends.md#piped)
diff --git a/i18n/zh/browser-extensions.md b/i18n/zh/browser-extensions.md index 67d69fb0..43686f02 100644 --- a/i18n/zh/browser-extensions.md +++ b/i18n/zh/browser-extensions.md @@ -50,11 +50,11 @@ These are some other [filter lists](https://github.com/gorhill/uBlock/wiki/Dashb ### uBlock Origin Lite -uBlock Origin also has a "Lite" version of their extension, which offers a very limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... +uBlock Origin also has a "Lite" version of their extension, which offers a limited feature-set compared to the original extension. However, it has a few distinct advantages over its full-fledged sibling, so you may want to consider it if... - ...you don't want to grant full "read/modify website data" permissions to any extensions (even a trusted one like uBlock Origin) - ...you want a more resource (memory/CPU) efficient content blocker[^1] -- ...your browser only supports Manifest V3 extensions +- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
@@ -78,7 +78,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a very
-We only recommend this version of uBlock Origin if you never want to make any changes to your filter lists, because it only supports a few pre-selected lists and offers no additional customization options, including the ability to select elements to block manually. These restrictions are due to limitations in Manifest V3's design. +We only recommend this version of uBlock Origin if you never want to add any filter lists not included by default, or need advanced options such as [dynamic filtering](https://github.com/gorhill/ublock/wiki/dynamic-filtering:-quick-guide) and the network logger. These restrictions are due to limitations in Manifest V3's design, notably the hard limit on the number of filtering rules, and the fact that extensions generally cannot fetch remote resources.[^3] This version offers three levels of blocking: "Basic" works without requiring any special privileges to view and modify site content, while the "Optimal" and "Complete" levels do require that broad permission, but offer a better filtering experience with additional cosmetic rules and scriptlet injections. @@ -88,7 +88,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up ### AdGuard -We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is not supported by uBlock Origin. Luckily, AdGuard provides an adequate alternative: +We recommend [Safari](mobile-browsers.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
@@ -118,3 +118,7 @@ Additional filter lists do slow things down and may increase your attack surface - 必须直接影响用户隐私，即不能简单地提供信息。 [^1]: uBlock Origin Lite _itself_ will consume no resources, because it uses newer APIs which make the browser process the filter lists natively, instead of running JavaScript code within the extension to handle the filtering. However, this resource advantage is only [theoretical](https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-asked-questions-\(FAQ\)#is-ubol-more-efficient-cpu--and-memory-wise-than-ubo), because it's possible that standard uBlock Origin's filtering code is more efficient than your browser's native filtering code. This has not yet been benchmarked. + +[^2]: A [workaround](https://github.com/uBlockOrigin/uBlock-issues/discussions/3690#discussioncomment-14548779) stil exists as of early December 2025. + +[^3]: This is starting to change, as MV3 extensions can now request to use scripts. This has enabled [AdGuard](https://adguard.com/en/blog/adguard-browser-extension-v5-2.html) to propose to import custom filters list by the url, as opposed to having to manually paste the rules, as is the case with uBOL. diff --git a/i18n/zh/data-broker-removals.md b/i18n/zh/data-broker-removals.md index 063c0711..d17316be 100644 --- a/i18n/zh/data-broker-removals.md +++ b/i18n/zh/data-broker-removals.md @@ -32,7 +32,6 @@ You should search for your information on these sites first, and submit an opt-o - BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search)) - CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select _Remove Record_ to opt-out) - ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out)) -- Dataveria ([Search](https://dataveria.com), [Opt-Out](https://dataveria.com/ng/control/privacy)) - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PeekYou ([Search](https://peekyou.com), [Opt-Out](https://peekyou.com/about/contact/ccpa_optout/do_not_sell)) diff --git a/i18n/zh/desktop-browsers.md b/i18n/zh/desktop-browsers.md index 8d9b60cd..7a3aa372 100644 --- a/i18n/zh/desktop-browsers.md +++ b/i18n/zh/desktop-browsers.md @@ -181,9 +181,11 @@ This protects you from persistent cookies, but does not protect you against cook ##### Telemetry -- [ ] 取消勾选 **允许火狐浏览器向Mozilla发送技术和互动数据** -- [ ] 取消勾选 **允许Firefox安装和运行研究** -- [ ] 取消勾选 **允许火狐代表您发送积压的崩溃报告** +- [ ] Uncheck **Send technical and interaction data to Mozilla** +- [ ] Uncheck **Allow personalized extension recommendations** +- [ ] Uncheck **Install and run studies** +- [ ] Uncheck **Send daily usage ping to Mozilla** +- [ ] Uncheck **Automatically send crash reports** According to Mozilla's privacy policy for Firefox, @@ -240,7 +242,7 @@ Max Protection enforces the use of DNS over HTTPS, and a security warning will s
-The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-[Common]) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. +The [Arkenfox project](https://github.com/arkenfox/user.js) provides a set of carefully considered options for Firefox. If you [decide](https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not) to use Arkenfox, a [few options](https://github.com/arkenfox/user.js/wiki/3.2-Overrides-%5BCommon%5D) are subjectively strict and/or may cause some websites to not work properly—which you can [easily change](https://github.com/arkenfox/user.js/wiki/3.1-Overrides) to suit your needs. We **strongly recommend** reading through their full [wiki](https://github.com/arkenfox/user.js/wiki). Arkenfox also enables [container](https://support.mozilla.org/kb/containers#w_for-advanced-users) support. Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing. diff --git a/i18n/zh/encryption.md b/i18n/zh/encryption.md index 990def8c..92399ac0 100644 --- a/i18n/zh/encryption.md +++ b/i18n/zh/encryption.md @@ -96,6 +96,14 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](basics/hardware.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in. +
+ +Shut devices down when not in use. + +Powering off your devices when they’re not in use provides the highest level of security, as it minimizes the attack surface of your FDE method by ensuring no encryption keys remain in memory. + +
+ ### BitLocker
@@ -110,47 +118,9 @@ Built-in OS encryption solutions generally leverage hardware security features s
-BitLocker is [officially supported](https://support.microsoft.com/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838) on the Pro, Enterprise, and Education editions of Windows. It can be enabled on Home editions provided that they meet the following prerequisites. +BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If you’re using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files. -
-Enabling BitLocker on Windows Home - -To enable BitLocker on "Home" editions of Windows, you must have partitions formatted with a [GUID Partition Table](https://en.wikipedia.org/wiki/GUID_Partition_Table) and have a dedicated TPM (v1.2, 2.0+) module. You may need to [disable the non-Bitlocker "Device encryption" functionality](https://discuss.privacyguides.net/t/enabling-bitlocker-on-the-windows-11-home-edition/13303/5) (which is inferior because it sends your recovery key to Microsoft's servers) if it is enabled on your device already before following this guide. - -1. Open a command prompt and check your drive's partition table format with the following command. You should see "**GPT**" listed under "Partition Style": - - ```powershell - powershell Get-Disk - ``` - -2. Run this command (in an admin command prompt) to check your TPM version. You should see `2.0` or `1.2` listed next to `SpecVersion`: - - ```powershell - powershell Get-WmiObject -Namespace "root/cimv2/security/microsofttpm" -Class WIN32_tpm - ``` - -3. Access [Advanced Startup Options](https://support.microsoft.com/windows/advanced-startup-options-including-safe-mode-b90e7808-80b5-a291-d4b8-1a1af602b617). You need to reboot while pressing the F8 key before Windows starts and go into the *command prompt* in **Troubleshoot** → **Advanced Options** → **Command Prompt**. -4. Login with your admin account and type this in the command prompt to start encryption: - - ```powershell - manage-bde -on c: -used - ``` - -5. Close the command prompt and continue booting to regular Windows. -6. Open an admin command prompt and run the following commands: - - ```powershell - manage-bde c: -protectors -add -rp -tpm - manage-bde -protectors -enable c: - manage-bde -protectors -get c: > %UserProfile%\Desktop\BitLocker-Recovery-Key.txt - ``` - -
-

Tip

- -Backup `BitLocker-Recovery-Key.txt` on your Desktop to a separate storage device. Loss of this recovery code may result in loss of data. - -
+Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](os/windows/group-policies.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
diff --git a/i18n/zh/frontends.md b/i18n/zh/frontends.md index 42cc9b8d..e6fe4775 100644 --- a/i18n/zh/frontends.md +++ b/i18n/zh/frontends.md @@ -177,41 +177,6 @@ When using FreeTube, your IP address may still be known to YouTube, [Invidious]( By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. -### Yattee - -
- -![Yattee logo](assets/img/frontends/yattee.svg){ align=right } - -**Yattee** is a free and open-source privacy oriented video player for iOS, tvOS, and macOS for [YouTube](https://youtube.com). Due to App Store restrictions, you will need to take a few [extra steps](https://web.archive.org/web/20230330122839/https://gonzoknows.com/posts/Yattee) before you can use Yattee to watch YouTube. Yattee allows you to connect to instances of [Invidious](#invidious) or [Piped](#piped). - -When using Yattee, your subscription list is saved locally on your device. - -[:octicons-home-16: Homepage](https://github.com/yattee/yattee){ .md-button .md-button--primary } -[:octicons-eye-16:](https://r.yattee.stream/docs/privacy.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/yattee/yattee/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/yattee/yattee){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/yattee/yattee/wiki/Donations){ .card-link title="Contribute" } - -
-Downloads - -- [:simple-apple: App Store](https://apps.apple.com/app/id1595136629) -- [:simple-github: GitHub](https://github.com/yattee/yattee/releases) - -
- -
- -
-

警告

- -When using Yattee, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](vpn.md) or [Tor](tor.md) if your [threat model](basics/threat-modeling.md) requires hiding your IP address. - -
- -By default, Yattee blocks all YouTube advertisements. In addition, Yattee optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. - ### LibreTube (Android)
diff --git a/i18n/zh/tools.md b/i18n/zh/tools.md index 18f68cbc..643dfba4 100644 --- a/i18n/zh/tools.md +++ b/i18n/zh/tools.md @@ -458,7 +458,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y - ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib) - ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok) - ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube) -- ![Yattee logo](assets/img/frontends/yattee.svg){ .twemoji loading=lazy } [Yattee (YouTube; iOS, tvOS, macOS)](frontends.md#yattee) - ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android) - ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android) - ![Invidious logo](assets/img/frontends/invidious.svg#only-light){ .twemoji loading=lazy }![Invidious logo](assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious)