1
1
mirror of https://github.com/privacyguides/privacyguides.org.git synced 2026-06-08 19:39:11 +00:00

Merge branch 'main' into move-to-hugo

This commit is contained in:
2026-05-31 13:36:26 -05:00
16 changed files with 652 additions and 62 deletions
+1
View File
@@ -18,6 +18,7 @@
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
# IN THE SOFTWARE.
$schema: https://raw.githubusercontent.com/DavidAnson/markdownlint/v0.40.0/schema/markdownlint-config-schema.json
default: true
line-length: false
ul-indent:
+571
View File
@@ -0,0 +1,571 @@
Kinect
Scanalytics
mmWave
TODO
MotionScore
GaitMetrics
Bayometric
eSIM
microSD
Cellebrite
GrapheneOS
Gboard
IMEs
Briar
Meshtastic
Gizmodo
Wickr
Gizmodo
Arel
CryptPad
itemprop
md-button
XWiki
CryptDrive
scrypt
Anytype
PeerTube
Startpage
PrivacyTools
FedResults
Brøgger
EasyOptOuts
Optery
DeleteMe
PeopleConnect
dFPI
Arkenfox
LocalCDN
fingerprintable
NeatURLs
ClearURLs
Bromite
GeckoView
Thorin-Oakenpants
customizability
DoH
DNSCrypt
eSNI
Mullvad
CalyxOS
microG
DejaVu
DroidGuard
NewPipe
WebView
linux-hardened
malloc
Malloc
ASLR
Grindr
USCCB
USCCB-owned
de-anonymize
MkDocs
privacyguides
balenaEtcher
img
thumbsup
KeePassXC
OnionShare
Exif
ExifTool
zsh
ImageOptim
SendTo
Handoff
Jailbreaking
Flatpaks
ChromeOS
Flatseal
dbus
XWayland
filesystem
Firejail
Whonix
seccomp
AppArmor
MicroOS
setuid
Bubblewrap
Krathalan
noatsecure
Seirdy
Podman
Kata
Wonderfall
Vaultwarden
LinuxServer
io
daemonless
gVisor
syscalls
Portmaster
OpenSnitch
firewalld
Netfilter
bypassable
sysctl
KickSecure
fepitre
QubesOS
COPR
GRSecurity
Kicksecure
umask
SUID
Umask
Qubes-Whonix
USBGuard
initramfs
dracut
BadUSB
chronyd
swdate
sysfs
cgroups
MathML
WebAuthn
BlockBlock
HELLOTUX
Véliz
Poitras
Anonym
ISRG
Orbot
Qubes
publicinterest
Warne
Pham
material-youtube
OpenCollective
Monero
CoinJoin
Banxa
@proton
CashApp
Samouri
Coinjoin
USDC
Stablecoins
stablecoins
IWAs
IWA
Beens
Techlore
whitehouse
ShredOS
del
OMEMO
reglock
nofollow
SecureDrop
Cwtch
OTF
SimpleX
noyb
darknet
Surfshark
ExpressVPN
PerfectPrivacy
IPVanish
CyberGhost
ibVPN
SurfShark
VPNArea
ThatOnePrivacySite
fluffily
Huxleyan
MPRs
INVISV
QUIC
Fastly
OHTTP
Appelbaum
md-button--primary
Niek
openpgp
material-github
Tweakers
fontawesome-brands-creative-commons
fontawesome-brands-creative-commons-by
fontawesome-brands-creative-commons-sa
Attribution-ShareAlike
ChatGPT
LLMs
OLMoE
MMLU-Pro
OpenLLM
GGUF
Llamafile
Ollama
cpp
fontawesome-brands-windows
simple-linux
LLaVA
fontawesome-solid-desktop
llamafiles
simple-torbrowser
simple-googleplay
eepsites
simple-firefoxbrowser
simple-googlechrome
fontawesome-brands-edge
scriptlet
Adguard
simple-appstore
Tuta
simple-flathub
Flathub
Cryptomator
Securitum
Tresorit
Computest
Peergos
InterPlanetary
IPFS
DocumentsProvider
Modmail
CipherTrace
Monero-only
Monerujo
CEX
RetoSwap
Haveno-Reto
Haveno
Guardarian
BeenVerified
CheckPeople
ClustrMaps
Dataveria
InfoTracer
PeekYou
PublicDataUSA
Radaris
USPhonebook
Whitepages
Grauer
simple-github
ExifEraser
permissionless
Accrescent
ExtendedXMP
IPTC
NoScript
cryptominers
non-proxied
Solana
PipeWire
Btrfs
openQA
NixOS
Toolbx
Nixpkgs
ProxyVM
deanonymized
qubes
Xen
pg-viridian
qube
KingsPawn
sysdiagnose
iMazing
keystore
Cleartext
DoT
DoQ
eu
NextDNS
RethinkDNS
dnscrypt-proxy
anycast
geo-steering
QNAME
PII
SimpleLogin
twemoji
addy
material-apple-ios
@addy
ProxyStore
@username
backported
FairEmail
Kontact
Mailvelope
NeoMutt
WKD
BitPay
paydirekt
Sofortüberweisung
YubiCloud
@mailbox
@secure
ActiveSync
non-Tuta
SOGo
Mailcow
OpenSMTPD
Rspamd
Mbox
JMAP
Hardenize
Subresource
cryptolib
cryptofs
siv-mode
cryptolib-swift
cryptomator-objc-cryptor
VeraCrypt
TrueCrypt
cryptoprocessor
non-Bitlocker
FileVault
FDE
udiskie
Polkit
Kryptor
Minisign
Intevation
OpenKeychain
ffsend
FreedomBox
Syncthing
simple-freebsd
MySudo
Coincards
Redlib
Yattee
eepsite
proxying
LibreTube
FramaTube
IVPN
Cromite
Adblock
EasyList
fontawesome-solid-ellipsis
adblock
LineageOS
NitroPhone
Nitrokey
Ente
Akregator
NewsFlash
Inoreader
Miniflux
NetNewsWire
Newsboat
Newsbeuter
Notesnook
Cryptee
Psono
KeePassX
KeePassDX
gopass
Pastebins
PrivateBin
ZeroBin
pastebin
pastebins
Stingle
PhotoPrism
UnifiedPush
simple-fdroid
Mollysocket
Olm
util-linux
uClibc
BusyBox
OPNsense
Netgate
pfSense
SearXNG
SearX
Yubico
PIV-compatibile
CCID
PIV
HOTP
YubiKeys
Nitrokeys
Obtainium
deanonymization
VpnService
torrenting
AntiTracker
VMess
DAITA
deanonymize
OTPs
SafetyNet
IDEMIA
backport
Silverblue
Šamalík
PKGBUILDs
PPAs
Linux-libre
Libre
ConfinedUsers
ZRAM
Linux-libre-based
Spectre
SWAPGS
DEs
NetworkManager
systemd-networkd
rpm-ostree-countme
countme
Hackintoshes
OCSP
XProtect
appVM
inter-qube
AppVM
vchan
qrexec
Qube
sys-net
sys-firewall
sys-proxyvm
sys-whonix
anon-whonix
ProxyVMs
NetVM
Rutkowska
AutoRun
PINs
OnTheHub
DevContainers
fullwidth
Fullwidth
OptiPNG
cwebp
Keyring
JustDeleteMe
NotPetya
EternalBlue
Technopolice
Datalogix
Cryptoprocessor
TPMs
Pluton
Buskill
BusKill
diceware
Diceware
geo-restrictions
ECH
dVPNs
dVPN
Pseudonymity
@Thorin-Oakenpants
DocumentsUI
CameraX
AFWall
AdAway
TrackerControl
loopback
Aptoide
APKPure
simple-gitlab
IzzyOnDroid
Gadgetbridge
tshark
systemd
systemd-resolved
EDNS
Chainalysis
BadExit
HSDir
deanonymizing
WebTunnel
Computerphile
namazso
HelloTux
wordmark
Bagnard
sublicensees
BurungHantu
privacytoolsIO
privacytools
trai
PrivacyGuides
@dngray
simple-youtube
simple-peertube
simple-bluesky
dngray
bsky
@freddy
Memoji
QuickType
Freeform
subprocessors
Schrems
Subprocessor
Subprocessors
Triplebit
Fediverse
Safing
YubiHSM
ykman
material-linux
yubico
material-microsoft-windows
HSMauth
PUK
TDES
ModHex
OATH-TOTPs
OATH-HOTP
OATH-HOTPs
MODHEX
HMAC-based
subkeys
subkey
keysize
Keygrip
tessera
Corbató
NordPass
Syncable
fontawesome-solid-glasses
CommonHealth
Euki
sympto-thermal
OsmAnd
Paaster
material-check-decagram
Bluesky
Codeberg
simple-codeberg
simple-reddit
fontawesome-brands-linkedin
simple-keepassxc
OnlyKey
fontawesome-solid-unlock-keyhole
KeeShare
KeePassium
MWEB
Cyd
Semiphemeral
Dangerzone
simple-activitypub
ActivityPub
pseudorandom
Chaum
unlinkability
Kagi
Secureblue
pseudonymity
TrueNAS
Arti
Tailscale
allowlisted
MyMonero
Monero-LWS
OkCupid
Anom
misgendering
@@ -75,7 +75,7 @@ When organizing events and meetups in person, it's essential to keep in mind phy
- Research if your venue has access to parking and accessible parking spots. Publish this information with your invitation.
- Verify the venue you select is accessible to people with visual or auditory impairments. For example, check if elevators are marked with Braille or raised letters, and make sure that hosts are informed on how to communicate with guests who are deaf or hard of hearing.
- Verify the venue you select is accessible to people with visual or auditory impairments. For example, check if elevators are marked with Braille or raised letters, and make sure that hosts are informed on how to communicate with guests who are deaf or hard of hearing.
### Health accessibility
@@ -25,7 +25,7 @@ Nevertheless, if we want to [**build a movement**](../tip-start-alliances-not-wa
- Even if you are also working on a similar project, lift them up with you!
It doesn't matter if you are working on something comparable yourself, or if perhaps you would word their work slightly differently. As long as the message is aligned with your mission and values, spread the words of your allies loud and far!
It doesn't matter if you are working on something comparable yourself, or if perhaps you would word their work slightly differently. As long as the message is aligned with your mission and values, spread the words of your allies loud and far!
By lifting each other up, we will broaden the reach of the message we share, and ultimately this serves our goals and our community too.
+1 -2
View File
@@ -152,6 +152,7 @@ We [**recommend**](../services/dns/index.md#recommended-providers) a number of e
{{< cards >}}
{{< card link="../software/data-redaction/#mat2" title="MAT2" image="../software/data-redaction/mat2.svg" subtitle="MAT2 is free, cross-platform software which allows you to remove metadata from image, audio, torrent, and document file types. It provides both a command line tool and a graphical user interface via an extension for Dolphin, the default file manager of KDE." >}}
{{< card link="../software/data-redaction/#metadata-cleaner" title="Metadata Cleaner" image="../software/data-redaction/metadatacleaner.svg" subtitle="Metadata Cleaner is a graphical metadata removal tool for Linux powered by MAT2." >}}
{{< card link="../software/data-redaction/#exiferaser-android" title="ExifEraser" image="../software/data-redaction/exiferaser.svg" subtitle="ExifEraser is a modern, permissionless image metadata erasing application for Android." >}}
{{< card link="../software/data-redaction/#exiftool-cli" title="ExifTool" image="../software/data-redaction/exiftool.png" subtitle="ExifTool is the original Perl library and command-line application for reading, writing, and editing meta information (Exif, IPTC, XMP, and more) in a wide variety of file formats (JPEG, TIFF, PNG, PDF, RAW, and more)." >}}
{{< /cards >}}
@@ -217,7 +218,6 @@ We [**recommend**](../services/dns/index.md#recommended-providers) a number of e
{{< cards >}}
{{< card link="../software/frontends/#redlib" title="Redlib" image="../software/frontends/redlib.svg" subtitle="Redlib is an open-source frontend to the Reddit website that is also self-hostable. You can access Redlib through a number of public instances." >}}
{{< card link="../software/frontends/#proxitok" title="ProxiTok" image="../software/frontends/proxitok.svg" subtitle="ProxiTok is an open-source frontend to the TikTok website that is also self-hostable." >}}
{{< card link="../software/frontends/#invidious" title="Invidious" image="../software/frontends/invidious.svg" subtitle="Invidious is a free and open-source frontend for YouTube that is also self-hostable." >}}
{{< card link="../software/frontends/#piped" title="Piped" image="../software/frontends/piped.svg" subtitle="Piped is a free and open-source frontend for YouTube that is also self-hostable." >}}
{{< card link="../software/frontends/#freetube" title="FreeTube" image="../software/frontends/freetube.svg" subtitle="FreeTube is a free and open-source desktop application for YouTube. FreeTube extracts data from YouTube using its built-in API based on YouTube.js or the Invidious API." >}}
@@ -265,7 +265,6 @@ We [**recommend**](../services/dns/index.md#recommended-providers) a number of e
{{< cards >}}
{{< card link="../software/mobile-browsers/#brave" title="Brave" image="../software/mobile-browsers/brave.svg" subtitle="Brave Browser includes a built-in content blocker and privacy features, many of which are enabled by default. Brave is built upon the Chromium web browser project, so it should feel familiar and have minimal website compatibility issues." >}}
{{< card link="../software/mobile-browsers/#cromite-android" title="Cromite" image="../software/mobile-browsers/cromite.svg" subtitle="Cromite is a Chromium-based browser with built-in ad blocking, fingerprinting protections, and other privacy and security enhancements. It is a fork of the discontinued Bromite browser." >}}
{{< card link="../software/mobile-browsers/#safari-ios" title="Safari (iOS)" image="../software/mobile-browsers/safari.svg" subtitle="On iOS, any app that can browse the web is restricted to using an Apple-provided WebKit framework, so a browser like Brave does not use the Blink engine (the core component of Chromium) like its counterparts on other operating systems. Safari is the default browser in iOS." >}}
{{< /cards >}}
+1 -1
View File
@@ -126,7 +126,7 @@ As an alternative to Flatpaks, there is the option of [Toolbx](https://docs.fedo
NixOSs package manager keeps every version of every package in a different folder in the **Nix store**. Due to this you can have different versions of the same package installed on your system. After the package contents have been written to the folder, the folder is made read-only.
NixOS also provides atomic updates. It first downloads (or builds) the packages and files for the new system generation and then switches to it. There are different ways to switch to a new generation: you can tell NixOS to activate it after reboot, or you can switch to it at runtime. You can also *test* the new generation by switching to it at runtime, but not setting it as the current system generation. If something in the update process breaks, you can just reboot and automatically and return to a working version of your system.
NixOS also provides atomic updates. It first downloads (or builds) the packages and files for the new system generation and then switches to it. There are different ways to switch to a new generation: you can tell NixOS to activate it after reboot, or you can switch to it at runtime. You can also *test* the new generation by switching to it at runtime, but not setting it as the current system generation. If something breaks during the update process, you can just reboot to return to a working version of your system.
The Nix package manager uses a purely functional language—which is also called Nix—to define packages.
+1 -1
View File
@@ -67,7 +67,7 @@ The protocol was independently [audited](https://eprint.iacr.org/2016/1013.pdf)
### Molly (Android)
If you use Android and your threat model requires protecting against [Targeted Attacks](../../../wiki/basics/common-threats/index.md#attacks-against-specific-individuals){ .pg-red } you may consider using this alternative app, which features a number of security and usability improvements, to access the Signal network.
If you use Android and your threat model requires protecting against [Targeted Attacks](../../../wiki/basics/common-threats/index.md#attacks-against-specific-individuals) you may consider using this alternative app, which features a number of security and usability improvements, to access the Signal network.
{{< title-card logo="./molly.svg" >}}
+1 -1
View File
@@ -16,7 +16,7 @@ aliases:
{{< /cards >}}
</div>
If you're looking for additional *privacy* from your ISP, on a public Wi-Fi network, or while torrenting files, a **VPN** may be the solution for you.
If you're looking for additional *privacy* from your ISP or on a public Wi-Fi network, a **VPN** may be the solution for you.
> [!CAUTION]
> Using a VPN will **not** keep your browsing habits anonymous, nor will it add additional security to non-secure (HTTP) traffic.
@@ -39,6 +39,22 @@ When sharing files, be sure to remove associated metadata. Image files commonly
[{{< badge content="Windows" color="red" >}}](https://pypi.org/project/mat2)
[{{< badge content="Web" >}}](https://github.com/jvoisin/mat2#web-interface)
## Metadata Cleaner
{{< title-card logo="./metadatacleaner.svg" >}}
**Metadata Cleaner** is a graphical metadata removal tool for Linux powered by [MAT2](https://github.com/jvoisin/mat2).
{{< cards >}}
{{< card link="https://metadatacleaner.gitlab.io/metadatacleaner/" title="Homepage" icon="home" >}}
{{< card link="https://gitlab.com/metadatacleaner/metadatacleaner/" title="Source Code" icon="code" >}}
{{< card link="https://gitlab.com/metadatacleaner/metadatacleaner/-/blob/main/CONTRIBUTING.md" title="Contribute" icon="heart" >}}
{{< /cards >}}
{{< /title-card >}}
[{{< badge content="Flathub" >}}](https://flathub.org/en/apps/io.gitlab.metadatacleaner.metadatacleaner)
## ExifEraser (Android)
{{< title-card logo="./exiferaser.svg" >}}
@@ -0,0 +1,32 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
SPDX-FileCopyrightText: Metadata Cleaner contributors
SPDX-License-Identifier: CC-BY-SA-4.0
-->
<svg width="128" height="128" version="1.0" viewBox="0 0 128 128" xmlns="http://www.w3.org/2000/svg">
<defs>
<linearGradient id="sponge_shading" x1="30.111" x2="89.889" y1="281.38" y2="281.38" gradientUnits="userSpaceOnUse">
<stop stop-color="#b5835a" offset="0"/>
<stop stop-color="#e5a50a" offset=".097354"/>
<stop stop-color="#e5a50a" offset=".28912"/>
<stop stop-color="#b5835a" offset=".45415"/>
<stop stop-color="#e5a50a" offset=".66135"/>
<stop stop-color="#e5a50a" offset="1"/>
</linearGradient>
</defs>
<g id="icon">
<path id="file_shadow" d="m20 104v5c0 4.432 3.568 8 8 8h72c4.432 0 8-3.568 8-8v-5z" fill="#c0bfbc"/>
<rect id="file" x="20" y="5" width="88" height="108" rx="8" fill="#f6f5f4"/>
<g id="fingerprint" fill="#813d9c">
<path d="m58.746 47.242a2 2 0 0 0-1.1543 2.582c7.056 18.489 22.133 27.506 22.133 27.506a2 2 0 0 0 2.7441-0.68555 2 2 0 0 0-0.68555-2.7441s-13.92-8.3786-20.455-25.502a2 2 0 0 0-2.582-1.1562z"/>
<path d="m59.262 38.004c-0.83784 0.0153-1.7138 0.13067-2.623 0.35742-4.3119 1.0753-7.0263 4.0708-7.6348 7.6758s0.46802 7.6083 2.4023 11.764c3.8687 8.3107 11.411 17.331 19.145 23.475a2 2 0 0 0 2.8105-0.32227 2 2 0 0 0-0.32227-2.8105c-7.217-5.7327-14.522-14.542-18.008-22.029-1.7427-3.7436-2.4687-7.1308-2.084-9.4102s1.4596-3.6633 4.6582-4.4609c2.7331-0.68164 3.874-0.24636 5.2168 1 1.3428 1.2464 2.6866 3.668 4.3184 6.75 3.2635 6.1639 7.935 14.81 19.154 21.348a2 2 0 0 0 2.7344-0.7207 2 2 0 0 0-0.7207-2.7344c-10.328-6.0189-14.379-13.618-17.633-19.764-1.627-3.0731-2.9895-5.8231-5.1328-7.8125-1.6075-1.492-3.7677-2.3506-6.2812-2.3047z"/>
<path d="m62.223 29.453c-3.6233-0.40368-7.8406 0.50957-12.73 3.0293-7.3209 3.7724-10.222 11.77-8.5312 20.705 1.6909 8.9349 7.6383 19.09 17.805 28.742a2 2 0 0 0 2.8281-0.07227 2 2 0 0 0-0.07422-2.8281c-9.7096-9.2186-15.157-18.81-16.629-26.586s0.69988-13.452 6.4336-16.406c5.9031-3.0419 9.8108-3.2061 12.887-2.0195 3.0759 1.1866 5.6107 3.9809 8.0508 7.6797 4.8801 7.3975 8.9869 18.195 18.459 22.658a2 2 0 0 0 2.6621-0.95703 2 2 0 0 0-0.95703-2.6621c-7.5339-3.5503-11.586-13.297-16.826-21.24-2.6199-3.9714-5.6344-7.5464-9.9492-9.2109-1.0787-0.41614-2.22-0.69747-3.4277-0.83203z"/>
<path d="m62.623 20.734c-4.4893-0.3054-9.6522 0.73135-15.576 3.5156-11.332 5.3259-15.237 15.197-14.721 25.02s5.0382 19.77 10.125 26.83a2 2 0 0 0 2.791 0.45312 2 2 0 0 0 0.45312-2.791c-4.6901-6.5097-8.9171-15.986-9.375-24.701-0.45786-8.7152 2.4379-16.495 12.43-21.191 7.2928-3.4276 12.71-3.787 17.045-2.5508 4.3352 1.2363 7.7614 4.1611 10.762 7.8926 3.0003 3.7314 5.5056 8.2197 7.9688 12.277 2.4632 4.0576 4.8136 7.7485 8.1523 9.7949a2 2 0 0 0 2.75-0.66016 2 2 0 0 0-0.66016-2.75c-2.1137-1.2956-4.4204-4.501-6.8242-8.4609-2.4038-3.9599-4.9748-8.6095-8.2695-12.707s-7.382-7.6922-12.783-9.2324c-1.3503-0.38506-2.7712-0.63648-4.2676-0.73828z"/>
</g>
<path id="cleaned_zone" d="m108 25.436c-40.541 10.75-71.772 60.021-71.772 60.021l48.851 22.011s8.9944-19.125 22.921-26.059z" fill="#fff" opacity=".9"/>
<g id="sponge">
<path d="m30.11 89.271 59.778 1.0104s-0.0095 2.4996 1e-4 6.6775c0.0046 1.968-0.4492 3.9705-1.4557 5.8305l-7.6143 14.072c-3.1637 5.847-10.418 8.007-16.265 4.843-4.6734-2.528-7.4951-8.603-12.168-11.132-4.708-2.547-11.268-1.549-15.976-4.096-4.0234-2.177-6.301-6.291-6.2996-10.55 7e-4 -1.9306 0-6.655 0-6.655z" fill="url(#sponge_shading)"/>
<path d="m31.567 83.55 7.6143-14.072c3.1637-5.8469 10.418-8.007 16.265-4.8433 4.7533 2.572 7.4153 8.5604 12.168 11.132 4.6281 2.5043 11.348 1.5921 15.976 4.0963 5.847 3.1638 8.0071 10.418 4.8433 16.265l-7.6143 14.072c-3.1637 5.847-10.418 8.007-16.265 4.844-4.6734-2.529-7.4951-8.604-12.168-11.133-4.708-2.547-11.268-1.548-15.976-4.0959-5.847-3.1637-8.0071-10.418-4.8433-16.265z" fill="#f5c211"/>
</g>
</g>
</svg>

After

Width:  |  Height:  |  Size: 3.8 KiB

@@ -134,12 +134,6 @@ Additionally, the Mozilla Accounts service collects [some technical data](https:
1. Open your [profile settings on accounts.firefox.com](https://accounts.firefox.com/settings#data-collection)
2. Uncheck **Data Collection and Use** > **Help improve Firefox Accounts**
##### Website Advertising Preferences
- [ ] Uncheck **Allow websites to perform privacy-preserving ad measurement**
With the release of Firefox 128, a new setting for [privacy-preserving attribution](https://support.mozilla.org/kb/privacy-preserving-attribution) (PPA) has been added and [enabled by default](https://blog.privacyguides.org/2024/07/14/mozilla-disappoints-us-yet-again-2). PPA allows advertisers to use your web browser to measure the effectiveness of web campaigns, instead of using traditional JavaScript-based tracking. We consider this behavior to be outside the scope of a user agent's responsibilities, and the fact that it is disabled by default in Arkenfox is an additional indicator for disabling this feature.
##### HTTPS-Only Mode
- [x] Select **Enable HTTPS-Only Mode in all windows**
-23
View File
@@ -17,7 +17,6 @@ When you are using an instance run by someone else, make sure to read the privac
<div class="pg-card-logos">
{{< cards >}}
{{< card link="#redlib" title="Redlib" image="./redlib.svg" subtitle="Redlib is an open-source frontend to the Reddit website that is also self-hostable. You can access Redlib through a number of public instances." >}}
{{< card link="#proxitok" title="ProxiTok" image="./proxitok.svg" subtitle="ProxiTok is an open-source frontend to the TikTok website that is also self-hostable." >}}
{{< card link="#invidious" title="Invidious" image="./invidious.svg" subtitle="Invidious is a free and open-source frontend for YouTube that is also self-hostable." >}}
{{< card link="#piped" title="Piped" image="./piped.svg" subtitle="Piped is a free and open-source frontend for YouTube that is also self-hostable." >}}
{{< card link="#freetube" title="FreeTube" image="./freetube.svg" subtitle="FreeTube is a free and open-source desktop application for YouTube. FreeTube extracts data from YouTube using its built-in API based on YouTube.js or the Invidious API." >}}
@@ -48,28 +47,6 @@ When you are using an instance run by someone else, make sure to read the privac
> [!TIP]
> Redlib is useful if you want to disable JavaScript in your browser, such as [Tor Browser](../tor/index.md#tor-browser) on the Safest security level.
## TikTok
### ProxiTok
{{< title-card logo="./proxitok.svg" >}}
**ProxiTok** is an open-source frontend to the [TikTok](https://tiktok.com) website that is also self-hostable.
There are a number of public instances, with some that offer a [Tor](../tor/index.md) onion service or an [I2P](../../advanced/alternative-networks/index.md#i2p-the-invisible-internet-project) eepsite.
{{< cards >}}
{{< card link="https://github.com/pablouser1/ProxiTok#readme" title="Repository" icon="code" >}}
{{< card link="https://github.com/pablouser1/ProxiTok/wiki/Public-instances" title="Public Instances" icon="server" >}}
{{< /cards >}}
{{< /title-card >}}
> [!TIP]
> ProxiTok is useful if you want to disable JavaScript in your browser, such as [Tor Browser](../tor/index.md#tor-browser) on the Safest security level.
## YouTube
**Note:** YouTube has gradually rolled out changes to its video player and API that have thwarted some of the methods used by third-party frontends for extracting YouTube data. If you experience reliability issues with one YouTube frontend, consider trying out another that uses a different extraction method.
@@ -1 +0,0 @@
<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" version="1.1" viewBox="0 0 33.867 33.867"><g><path fill="#4343ff" d="m75.442 117.85c3.3426-0.62057 5.8921-0.31143 8.1139 2.4694 2.9164-2.5188 5.4372-2.8222 9.1722-2.8222-4.1614-5.3918-13.3-5.0479-17.286 0.35278m-2.4694 8.8194h0.35278c0.57274-2.4745 1.4387-4.7979 3.5278-6.35-0.0024 3.6523-2.0171 8.0642-1.0975 11.636 0.49495 1.9227 3.2713 3.1322 4.9781 3.7012 4.9853 1.6617 10.772-0.5401 13.344-5.1071 2.4443-4.3407 2.4887-10.227-3.1135-10.936-0.54247 2.8791-1.2627 5.8902-1.3972 8.8194-0.0545 1.1867 0.16563 2.8529-1.1229 3.4973-1.6634 0.83189-2.0984-1.2819-2.0042-2.439 0.26141-3.2124 1.2561-6.5356 2.4076-9.525-1.338 0.0285-3.3185 0.0732-4.3735 1.0352-0.7456 0.67987-0.64012 1.9754-1.0793 2.8451-1.3627 2.6986-3.871 3.4357-6.5416 2.4697 1.198-0.74525 2.8991-1.1261 3.5245-2.5076 1.8751-4.1413-4.1426-6.0016-6.4428-3.0566-1.2381 1.5851-0.96224 4.037-0.96224 5.9169z" transform="matrix(1.4916 0 0 1.4916 -108.81 -169.4)"/></g></svg>

Before

Width:  |  Height:  |  Size: 998 B

+22 -19
View File
@@ -11,7 +11,6 @@ aliases:
<div class="pg-card-logos">
{{< cards >}}
{{< card link="#brave" title="Brave" image="./brave.svg" subtitle="Brave Browser includes a built-in content blocker and privacy features, many of which are enabled by default. Brave is built upon the Chromium web browser project, so it should feel familiar and have minimal website compatibility issues." >}}
{{< card link="#cromite-android" title="Cromite" image="./cromite.svg" subtitle="Cromite is a Chromium-based browser with built-in ad blocking, fingerprinting protections, and other privacy and security enhancements. It is a fork of the discontinued Bromite browser." >}}
{{< card link="#safari-ios" title="Safari (iOS)" image="./safari.svg" subtitle="On iOS, any app that can browse the web is restricted to using an Apple-provided WebKit framework, so a browser like Brave does not use the Blink engine (the core component of Chromium) like its counterparts on other operating systems. Safari is the default browser in iOS." >}}
{{< /cards >}}
</div>
@@ -48,7 +47,7 @@ These options can be found in the menu → **Settings** → **Brave Shields & pr
=== "iOS"
These options can be found in the menu → **Settings****Shields & Privacy**.
These options can be found in the menu → **All Settings****Shields & Privacy**.
#### Brave shields global defaults
@@ -76,7 +75,7 @@ Shields' options can be downgraded on a per-site basis as needed, but by default
</details>
- [x] Select **Forget me when I close this site**
- [x] Select **Site Tabs Closed** under *Auto Shred*
</div>
@@ -105,24 +104,16 @@ Shields' options can be downgraded on a per-site basis as needed, but by default
1. This option disables JavaScript, which will break a lot of sites. To unbreak them, you can set exceptions on a per-site basis by tapping on the Shield icon in the address bar and unchecking this setting under *Advanced controls*.
##### Clear browsing data (Android only)
- [x] Select **Clear data on exit**
##### Social Media Blocking (Android only)
- [ ] Uncheck all social media components
#### Other privacy settings
=== "Android"
<div class="annotate" markdown>
- [x] Select **Disable non-proxied UDP** under [*WebRTC IP handling policy*](https://support.brave.com/hc/articles/360017989132-How-do-I-change-my-Privacy-Settings#webrtc)
- [x] (Optional) Select **No protection** under *Safe Browsing* (1)
- [x] Select **Disable non-proxied UDP** under [*WebRTC IP handling policy*](https://support.brave.com/hc/articles/360017989132-How-do-I-change-my-Privacy-Settings#webrtc)
- [ ] Uncheck **Allow sites to check if you have payment methods saved**
- [ ] Uncheck **Javascript optimization & security** under the setting with the same name
- [x] Select **Do not speed up sites with Brave's V8 engine but make Brave slightly more resistant to attacks**
- [x] Select **Close tabs on exit**
- [ ] Uncheck **Allow privacy-preserving product analytics (P3A)**
- [ ] Uncheck **Automatically send diagnostic reports**
@@ -137,23 +128,35 @@ Shields' options can be downgraded on a per-site basis as needed, but by default
- [ ] Uncheck **Allow Privacy-Preserving Product Analytics (P3A)**
- [ ] Uncheck **Automatically send daily usage ping to Brave**
#### Leo
#### Leo AI
These options can be found in the menu → **Settings****Leo**.
These options can be found in the menu → **Settings****Leo AI**.
<div class="annotate" markdown>
- [ ] Uncheck **Show autocomplete suggestions in address bar** (1)
- [ ] Uncheck **Show autocomplete suggestions in address bar**
</div>
1. This option is not present in Brave's iOS app.
=== "iOS"
These options can be found in the menu → **All Settings****Leo AI**.
- [ ] Uncheck **Show In Quick Search Engine Bar**
#### Search engines
These options can be found in the menu → **Settings****Search engines**.
=== "Android"
- [ ] Uncheck **Show search suggestions**
These options can be found in the menu → **Settings****Search engines**.
- [ ] Uncheck **Show search suggestions**
=== "iOS"
These options can be found in the menu → **All Settings****Search engines**.
- [ ] Uncheck **Show In Quick Search Engine Bar**
#### Brave Sync
+3 -5
View File
@@ -36,11 +36,9 @@ Note that a VPN does not add any security or encryption to your traffic between
## Should I use a VPN?
**Yes**, almost certainly. A VPN has many advantages, including:
**Yes**, almost certainly. The advantages of a VPN include:
1. Hiding your traffic from **only** your Internet Service Provider.
1. Hiding your downloads (such as torrents) from your ISP and anti-piracy organizations.
1. Hiding your IP from third-party websites and services, helping you blend in and preventing IP based tracking.
1. Hiding your IP from third-party websites and services, preventing IP based tracking.
1. Allowing you to bypass geo-restrictions on certain content.
VPNs can provide *some* of the same benefits Tor provides, such as hiding your IP from the websites you visit and geographically shifting your network traffic, and good VPN providers will not cooperate with e.g. legal authorities from oppressive regimes, especially if you choose a VPN provider outside your own jurisdiction.
@@ -59,7 +57,7 @@ You also should not trust a VPN to secure your connection to an unencrypted, HTT
Unless your VPN provider hosts the encrypted DNS servers themselves, **probably not**. Using DOH/DOT (or any other form of encrypted DNS) with third-party servers will simply add more entities to trust. Your VPN provider can still see which websites you visit based on the IP addresses and other methods. All this being said, there may be some advantages to enabling encrypted DNS in order to enable other security features in your browser, such as ECH. Browser technologies which are reliant on in-browser encrypted DNS are relatively new and not yet widespread, so whether they are relevant to you in particular is an exercise we will leave to you to research independently.
Another common reason encrypted DNS is recommended is that it prevents DNS spoofing. However, your browser should already be checking for [TLS certificates](https://en.wikipedia.org/wiki/Transport_Layer_Security#Digital_certificates) with **HTTPS** and warn you about it. If you are not using **HTTPS**, then an adversary can still just modify anything other than your DNS queries and the end result will be little different.
Another common reason encrypted DNS is recommended is that it prevents DNS manipulation attacks. However, your browser should already be checking for [TLS certificates](https://en.wikipedia.org/wiki/Transport_Layer_Security#Digital_certificates) with **HTTPS** and warn you about it. If you are not using **HTTPS**, then an adversary can still just modify anything other than your DNS queries and the end result will be little different.
## Should I use Tor *and* a VPN?
+1 -1
View File
@@ -25,7 +25,7 @@ You can enhance your privacy and security on Windows without downloading any thi
## Privacy Notes
Microsoft Windows, particularly those versions aimed at consumers like the **Home** version often don't prioritize privacy-friendly features by [default](https://theguardian.com/technology/2015/jul/31/windows-10-microsoft-faces-criticism-over-privacy-default-settings). As a result we often see more [data collection](https://en.wikipedia.org/wiki/Criticism_of_Microsoft#Telemetry_and_data_collection) than necessary, without any real warnings that this is the default behavior. In an attempt to compete with Google in the advertising space, [Cortana](https://en.wikipedia.org/wiki/Cortana_(virtual_assistant)) has included unique identifiers such as an "advertising ID" in order to correlate usage and assist advertisers in targeted advertising. At launch, telemetry could not be disabled in non-enterprise editions of Windows 10. It still cannot be disabled, but Microsoft added the ability to [reduce](https://extremetech.com/computing/243079-upcoming-windows-update-reduces-spying-microsoft-still-mum-data-collects) the data that is sent to them.
Microsoft Windows, particularly those versions aimed at consumers like the **Home** version often don't prioritize privacy-friendly features by [default](https://theguardian.com/technology/2015/jul/31/windows-10-microsoft-faces-criticism-over-privacy-default-settings). As a result we often see more [data collection](https://en.wikipedia.org/wiki/Criticism_of_Microsoft#Telemetry_and_data_collection) than necessary, without any real warnings that this is the default behavior. In an attempt to compete with Google in the advertising space, [Cortana](https://en.wikipedia.org/wiki/Cortana_(virtual_assistant)) has included unique identifiers such as an "advertising ID" in order to correlate usage and assist advertisers in targeted advertising. At launch, telemetry could not be disabled in non-enterprise editions of Windows 10. It still cannot be disabled, but Microsoft added the ability to [reduce](https://extremetech.com/computing/243079-upcoming-windows-update-reduces-spying-microsoft-still-mum-data-collects) the data that is sent to them.
With Windows 11 there are a number of restrictions or defaults such as: