N.E.P.T.R

Ironfox or Cromite

DuckDuckGo Browser is a webview browser which has weaker tab isolation and uses the system’s default webview implementation, most often chrome webview.

Ubuntu Touch is still a Linux distro. I was referring to how Linux-like the experience is.

Not really a Linux distro. Based on Gentoo but not really a Linux distro, just like Android.

Zorin is too walled off IMO. Too many features locked in Pro version.

Fedora KDE edition or OpenSUSE Tumbleweed/Slowroll. Otherwise could try Aurora.

I avoid Ubuntu base because it is slow to update packages, and the inclusion of Snap packages are a no from me.

Ubuntu is a corporate/popular distro. It wouldn’t make much sense to move to do as when it lacks much of the functionality of sudo and isnt in a memory safe language, which is Ubuntu’s goal with replacing user space software with Rust.

It’s Portuguese

But stale bread for French toast??

Do you use libsodium for encryption? They is the gold standard.

Canvas blocker is redundant with Librewolf’s protections (privacy.resistFingerprinting), same with JS blocker redundant with uBlock Origin. You make yourself more fingerprintable. It is better that you first understand what protections you have and why before adding new addons that increase attack surface. The features you are looking for are included already.

Yeah okay.

My logic was that it is much more likely that someone will spoof there useragent already if they are on Linux. If threat actor is targeting not just Windows but also Linux, they probably would understand the very real likelyhood of platform spoofing.

Firstly there is no need to be condescending.

Secondly, do you block all JS? NoScript is not a silver bullet and doesnt stop fingerprinting, it is itself identified by the CreepJS test site. It may in this case reduce the chance of OS fingerprinting, but pure CSS methods exist as well.

Additionally, NoScript is laregly redundant with uBlock Origin since you can do everything that it offers, such as blocking 3rd party scripts/iframes/all, block fonts, block JS, and it is very granular.

Bottom line, you are fingerpintable.

It is trivial to identify OS platform because browser work differently on each platform. Wjat Librewolf does with useragent on Linux actually is makes users stand out more because it isn’t what privacy.resistFingerprinting (RFP) reports on normally.

Hackers (like the comment scenario i was responding to) are substantially more likely to employ platform fingerprint than trust a fale useragent. And loads general websites employ fingerprinting, meaning deviation from default RFP behaviour makes you stand out (more than you already do by using RFP since it is a small pool already).

You can lie, but that doesnt mean that a website cant still tell your base OS if they use JS platform fingerprinting. Arkenfox, the base config which Librewolf is based off of says the exact same thing. Go to CreepJS and see it get your platform regardless.

Except websites can tell what base OS you run using browser fingerprinting. It os impossible to lie aboit your OS because of the differences in platforms.