Semantic search
- Adblock Plus
- ⚠ Antifeature: Tracking comment
Adblock Plus is ineffective for surveillance protection by default as it comes with Acceptable Ads enabled: These ads are not meant to be "ads that don't track you".Blocks banners, pop-ups, tracking, malware. By default, nonintrusive ads aren't blocked in order to support websites.
The add-on is supported by over forty filter subscriptions in dozens of languages which automatically configure it for purposes ranging from removing online advertising to blocking all known malware domains. Adblock Plus also allows you to customize your filters with the assistance of a variety of useful features, including a context option for images, a block tab for Flash and Java objects, and a list of blockable items to remove scripts and stylesheets.
Starting with Adblock Plus 2.0 there is an option in Filter Preferences to allow some non-intrusive advertising. The goal is to support websites using non-intrusive ways to advertise and to encourage more websites to do the same.
- Anastasis ,
- Anastasis is a key recovery system that allows the user to securely deposit shares of a core secret with an open set of escrow providers, to recover it if the secret is lost. The core secret itself is protected from the escrow providers by giving each provider only part of the information, and additionally by encrypting it with an identity-based key unknown to the providers.
- AnonAddy
- AnonAddy is an email forwarding service designed to protect a user's email addresses from spam and other unwanted emails. It allows you to create random aliases that can be used to forward emails to your main account. This way, you can sign up on services around the Web without giving your real email address.
- Anontwi
- Anontwi - is a tool for OAuth2 applications (such as: GNUSocial, Twitter...) that provides different layers of encryption and privacy methods.
- App Manager
- == Features ==
General features
- Material design 3
- Displays as much information as possible in the main page
- Lists activities, broadcast receivers, services, providers, app ops, permissions, signatures, shared libraries, etc. of an application
- Launch activities and services
- Create shortcuts of activities
- Intercept activities
- Scan for trackers and libraries in apps and list (all or only) tracking classes (and their code dump)
- View/save the manifest of an app
- Display app usage, data usage (mobile and wifi), and app storage info (requires “Usage Access” permission)
- Install/uninstall APK files (including APKS, APKM and XAPK with OBB files)
- Share APK files
- Back up/restore APK files
- Batch operations
- Single-click operations
- Logcat viewer
- Profiles (including presets for quick debloating)
- Open an app in Aurora Store or in your favourite F-Droid client directly from App Manager
- Sign APK files with custom signatures before installing
- Backup encryption: OpenPGP via OpenKeychain, RSA (hybrid encryption with AES) and AES.
Root/ADB-only features
- Revoke runtime (AKA dangerous) and development permissions
- Change the mode of an app op
- Display/kill/force-stop running apps or processes
- Clear app data or app cache
- View/change net policy
- Control battery optimization
Root-only features
- Block any activities, broadcast receivers, services, or providers of an app with native import/export as well as Watt and Blocker import support
- View/edit/delete shared preferences of any app
- Back up/restore apps with data, rules and extras (such as permissions, battery optimization, SSAID, etc.)
- View system configurations including blacklisted or whitelisted apps, permissions, etc.
- View/change SSAID.
- ArkOS
- arkOS is a lightweight GNU/Linux-based operating system, initially targeted to run on a Raspberry Pi, intended to make self-hosting server software as easy as possible. It has different components that interact to achieve these ends, chief among them an integrated application called Genesis which graphically manages the server and its components. With Genesis, users can easily add/remove server software, manage websites, change system settings and more from a reliable visual interface that's easy to use. arkOS puts a focus on user's experience, requiring no command line experience to run well. In the future, users will also be able to host their email accounts, chat accounts, and social networking profiles from an arkOS server just as easily.
- Autohosts
- Hosts files will reroute unwanted traffic from ad farms, behavioral tracking firms and malware sites to a blackhole; routing to 0.0.0.0 (localhost; your PC) when a request is made to a URL on the blacklist. Which means any traffic that would have left your system for that destination, is sent inward, to your localhost and then abandoned. Despite what some may suggest, hosts files are not "1980s technology" and still very useful today, as an additional layer of security. Hosts file are a useful redundancy when coupled with ad blockers like uBlock Origin and uMatrix - while debugging or 'Temporarily Allow All on this Site' with Noscript can open you up to underlying attacks or privacy intrusions. In-browser filters won't protect you if the browser itself is phoning home. If you have an up-to-date hosts file, the risk is severely lessened. Auto Hosts will automate the setup process for maintaining an up to date hosts file, by: - Installing a weekly cronjob to pull fresh/updated copies of hosts lists (default is every Sunday at 7:22pm) (Default custom_filters and firefox-includes) source appends Facebook trackers, Linkedin ads, Google fonts, Firefox telemetry and other harvester sites that curated lists for whatever reason, have not added to their blacklists - Refreshes DNS to instantiate the re-routed changes (Mac Only) If Devdom is installed, append all local virtualhosts (if it is installed - it is -not- a requirement! Autohosts does a conditional check to ensure your dev environment doesn't break if you're using Devdom. Read the code.) - Uninstall offers the ability to revert to a fresh hosts file and undo any changes made by Autohosts; a backup will be copied to /tmp - Add custom blacklists, whitelists and host sources from ~/autohosts on your desktop
- BAD HARVEST
- BAD HARVEST is a form-mail CGI script designed to be called from links similar to "mailto:...". It helps you to hide email addresses from "harvesters" (automated email-address collectors) while still providing a convenient way for your visitors to contact you.
- Blindsend
- Modified from README.md: Blindsend is a free software tool for private, end-to-end encrypted file exchange between two agents. Current use case requires a requesting party (file Receiver) to initiate the file exchange by generating a link via blindsend and transmiting that link to the file Sender; after the Sender uploads the file to blindsend, the Receiver is able to use the same link to download the file. When exchanging files via blindsend, encryption and decryption always take place on Sender's/Receiver's local machines.
- Briar
- Briar is a messaging app designed for activists, journalists, and anyone else who needs a safe, easy and robust way to communicate. Unlike traditional messaging apps, Briar doesn't rely on a central server - messages are synchronized directly between the users' devices. If the internet's down, Briar can sync via Bluetooth or Wi-Fi, keeping the information flowing in a crisis. If the internet's up, Briar can sync via the Tor network, protecting users and their relationships from surveillance.
- Chameleon Addon
- Chameleon is a WebExtension port of the popular Firefox addon Random Agent Spoofer. The UI is near identical and contains most of the features found in the original extension.
- Cjdns
- Cjdns implements an encrypted IPv6 network using public key cryptography for address allocation and a distributed hash table for routing. This provides near zero-configuration networking without many of the security and robustness issues that regular IPv4 and IPv6 networks have. Hyperboria is the largest cjdns network, with hundreds of active nodes around the world.
- ClassyShark3xodus
- Checks apps for code signatures of known trackers (provided by Exodus). Also can list all classes for launchable (via the app drawer) packages. Can be used against any APK: - installed: via an app manager, - downloaded: via any file manager (long press and open with ClassyShark3xodus), - launchable installed: via the first screen list (long press to list all classes, including obfuscated ones). Note: doesn't work on odexed/system packages (it's a work-in-progress). Finally, the app doesn't sync or connect to the Internet and thus cannot sneak on end users. The app is updated when Exodus updates their list of trackers: https://reports.exodus-privacy.eu.org/api/trackers ClassyShark3xodus is based on Google's ClassyShark: https://github.com/google/android-classyshark
- Conversations.im
- Conversations is a Jabber/XMPP client for Android 5.0+ smartphones that has been optimized to provide a unique mobile experience. A port to iOS is envisaged in the medium-term future. Conversations allows you to easily send images, show if your contact has received and read your message, permit dynamic history and handles multiple devices (especially sync with desktop clients), allow you to create group chats and support one-to-one Audio/Video calls ! And thanks to the XMPP Protocol (that is a push protocol) you battery life is safe. Conversations also does not require a Google Account or specifically Google Cloud Messaging (GCM). Using the XMPP federated protocol, you can freely choose a trustworthy server (your own if you want) for yourself while still chatting with contacts that are using other servers. The communication between Conversations and the XMPP server as well as the communication between the individual servers is TLS encrypted. This way, not only your messages are safe but more importantly it is impossible for an outside attacker to intercept your meta data (with whom you are chatting) without attacking your server first. On top of that, Conversations gives you the choice to enable one of two end-to-end encryption mechanisms. The first one is OMEMO, a state of the art multi-end-to-multi-end encryption method which is very easy to setup and gives you forward secrecy and plausible deniability. For backwards compatibility reasons Conversations also supports OpenPGP.
- CryptPad
- CryptPad is a libre and encrypted collaboration suite that can be used for forms, presentations and other collaborative documents.
- Crypton
- Crypton is a software framework for remote storage, where the remote server has no knowledge of what is being stored. The content is encrypted client-side before it reaches the server. The framework is designed to be easy for application developers to use, without needing experience in encryption.
- Ddgr
- ddgr is a cmdline utility to search DuckDuckGo from the terminal. While googler is extremely popular among cmdline users, in many forums the need of a similar utility for privacy-aware DuckDuckGo came up. DuckDuckGo Bangs are super-cool too! So here's ddgr for you! Unlike the web interface, you can specify the number of search results you would like to see per page. It's more convenient than skimming through 30-odd search results per page. The default interface is carefully designed to use minimum space without sacrificing readability. A big advantage of ddgr over googler is DuckDuckGo works over anonymous networks. ddgr isn't affiliated to DuckDuckGo in any way.
- Decentraleyes
- Protects you against tracking through "free", centralized, content delivery. It prevents a lot of requests from reaching networks like Google Hosted Libraries, and serves local files to keep sites from breaking. Complements regular content blockers.
Technical Information
- Supported Networks: Google Hosted Libraries, Microsoft Ajax CDN, CDNJS (Cloudflare), jQuery CDN (MaxCDN), jsDelivr (MaxCDN), Yandex CDN, Baidu CDN, Sina Public Resources, and UpYun Libraries.
- Bundled Resources: AngularJS, Backbone.js, Dojo, Ember.js, Ext Core, jQuery, jQuery UI, Modernizr, MooTools, Prototype, Scriptaculous, SWFObject, Underscore.js, and Web Font Loader.
FAQ
If you're using uMatrix, Edit in and Commit these lines to My rules in the Dashboard:
(Please note that each line must also START with a '*' character but this Wiki is broken and does not allow to render this properly!)
- ajax.aspnetcdn.com script allow
- ajax.googleapis.com script allow
- ajax.microsoft.com script allow
- cdn.jsdelivr.net script allow
- cdnjs.cloudflare.com script allow
- code.jquery.com script allow
- lib.sinaapp.com script allow
- libs.baidu.com script allow
- upcdn.b0.upaiyun.com script allow
- yandex.st script allow
- yastatic.net script allow
- ajax.aspnetcdn.com * noop
- ajax.googleapis.com * noop
- ajax.microsoft.com * noop
- cdn.jsdelivr.net * noop
- cdnjs.cloudflare.com * noop
- code.jquery.com * noop
- lib.sinaapp.com * noop
- libs.baidu.com * noop
- upcdn.b0.upaiyun.com * noop
- yandex.st * noop
- yastatic.net * noop
- Directnet
- DirectNet is a peer-to-peer instant messaging protocol and client software for multiple platforms, including Windows, GNU/Linux and Mac OS X, developed by Gregor Richards.
- DuckDuckGo (HTML SSL)
- DuckDuckGo is the search engine that doesn't track you.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the page “GNU Free Documentation License”.
The copyright and license notices on this page only apply to the text on this page. Any software or copyright-licenses or other similar notices described in this text has its own copyright notice and license, which can usually be found in the distribution or license text itself.
