Kategorie: InfoSec

“Passwords are like underwear: don’t let people see it, change it very often, and you shouldn’t share it with strangers.” – Chris Pirillo

Automatic handling of cookie warnings (GDPR/DSGVO consent forms)

There is nothing more annoying than going to a website and getting a big warning about cookies instead of the actual content you are looking for – e.g. https://www.facebook.com/

Facebook web site that shows annoying cookie pop-up

The good news is all modern browsers block or at least drastically limit the number of third-party cookies. This is already a big win for preventing cross-page tracking. But you can also do some additional configurations and use 3rd party extensions to have pretty much an automatic handling way to get rid of those annoying cookie pop-up’s.

uBlock Origin

In this blog post https://bloqspot4rockers.de/2019/11/03/protection-against-web-tracker-and-advertising/, i’ve already mentioned uBlock Origin and its capabilities in regards of filtering web content. Here we need to tick additional filters, if you haven’t done so.

  1. click on uBlock icon and go the Dashboard
  2. switch to the tab : „filterlists“ and add the following checkmarks to
  3. Click the Update button before configuring your filters. Click it and wait a few seconds then tick the following filters:
  • AdGuard Annoyances
  • Fanboy’s Annoyance
  • uBlock filters – Annoyances
uBlock Origin filter category Annoyances

Last but not least, click on Apply Changes!!! This is required to save your settings.

Firefox Browser Add-ons

Here are browser extensions that offer different functionalities for the end user to get rid of annyoing pop-up’s from showing.

A heads up first! These functions can cause problems, which would have an effect, for instance that certain web pages are not loading properly. It can also be that some web sites still display annoying cookie pop-up forms.

I don’T Care About Cookies

https://addons.mozilla.org/de/firefox/addon/i-dont-care-about-cookies/

As the name suggests, if you don’t care about cookies this extension might be the right candidate for you to get rid of cookie warnings from allmost all websites. But there is also a downside when using this add-on:

In most cases, the add-on just blocks or hides cookie related pop-ups. When it’s needed for the website to work properly, it will automatically accept the cookie policy for you (sometimes it will accept all and sometimes only necessary cookie categories, depending on what’s easier to do). It doesn’t delete cookies.

https://addons.mozilla.org/de/firefox/addon/i-dont-care-about-cookies/

Again, if you don’t care about cookies at all you gonna love this add-on!

Consent-O-Matic

https://addons.mozilla.org/en-US/firefox/addon/consent-o-matic/

A browser extension that automatically answers consent pop-ups for you:

Cookie pop-ups are designed to be confusing and make you ‚agree‘ to be tracked. This add-on automatically answers consent pop-ups for you, so you can’t be manipulated. Set your preferences once, and let the technology do the rest!

https://addons.mozilla.org/en-US/firefox/addon/consent-o-matic/

There are 6 preferences you can toggle based on the data processing purposes found in 680 pop-ups (of the top 10K most popular sites in the UK).

Currently, Consent-O-Matic only works on relatively few German websites. But it already relieves users of click work in some cases – especially if they spend a lot of time on English-language sites.

Consent Blocker

https://addons.mozilla.org/de/firefox/addon/google-consent/

Blocks consent dialogs by either injecting the consent cookie(s)/storage item(s) or blocking requests to the consent management platform.

https://addons.mozilla.org/de/firefox/addon/google-consent/

In a small test run, this extension performed best, when it comes to blocking capabilities. Still some web sites (e.g. https://www.golem.de/) display pop-ups.

Of course, there are many other browser extentions, like AdGuard that is probably used by many to block advertisements. However, it is individually adjustable and can also be used to additionally or exclusively block cookie banners only. I personally do not use it, simply because uBlock and the above mentioned extension „Consent Blocker“ works best for me. However you can easily try them out and then decide if the particular extension is suitable for you.

Additional resources:

https://piwikpro.de/glossar/consent/

https://gdpr.eu/gdpr-consent-requirements/

https://www.digitalcitizen.life/simple-questions-what-are-cookies-what-do-they-do/

How to improve your Home-Router

(Wifi Security/Configuration)

This post describes a list of security and configuration improvements regarding Home-Router’s (e.g. Fritzbox, NetGear, D-Link)

Change default administrator password

To change the default administrator password, you need to login on your router’s management webpage. If you never done this, take a look below your router. You will find a sticker with information like: Wifi-Network (SSID), Password, WPA2-Key. Depending on your router’s manufacturer, you will find e.g. http://192.168.178.1 or http://192.168.0.1 as an entry point.

Once you are logged in, look out for the administrator password under the settings section. Change the default password into a loooooong password.

Thats it!

Wifi encryption type and password

Recommendation

Encyption-Type: WPA2 Personal + AES (CCMP)
Password-length: At least 15 or more characters

Upgrade firmware

Ensure that you running the latest version.
If you’re running a router, that’s not getting updates, its time for a new one.
There are many router manufacturer and today i came across this article by heise.de ( https://www.heise.de/news/Keine-Ueberraschung-nach-Frauenhofer-Test-Viele-Home-Router-unsicher-4798342.html )

Wifi Protected Setup (WPS)

If you dont have an use-case, turn it off!

Guest network

Use the guest network for Internet-only devices (e.g. Smartphone, IPad4)

Protection against web tracker and advertising

Websites on the internet identify and collect information about users by so-called web tracking technology. To track user information, many websites save a small piece of data, embed invisible objects, or use accounts and hardware configuration.

To protect your privacy and security on the internet, various browser tools (Add-ons) exist to identify advertising tracking and other user surveillance technologies that website owners deploy on their sites.

Firefox / Chrome Add-ons

uBlock Origin (For beginners)
uBlock Origin is a free, cross-platform web browser plug-in for filtering web content such as advertising. uBlock is working based on filter lists and out of the box in the blocking mode : easy mode

https://github.com/gorhill/uBlock/wiki/Blocking-mode:-easy-mode

To further reduce advertising and data collecting trackers, the following configuration changes are necessary:

  1. click on uBlock icon and go the Dashboard
  2. switch to the tab : „filterlists“ and add the following checkmarks to:
  • Adblock Warning Removal List („Advertising„)
  • AdGuard Base List („Advertising„)
  • AdGuard Mobile Ads („Advertising„)
  • AdGuard Spyware Filters („Privacy„)
  • Fanboy’s Enchanced Tracking List („Privacy„)
  • DEU: EasyList Germany („Regions, languages„)

uMatrix (For advanced users)
A matrix-based firewall, easy to use with a click of the mouse – and with many extras to protect your privacy.

https://addons.mozilla.org/de/firefox/addon/umatrix/

uBlock and uMatrix together
While uBlock is a great ad/content blocker, uMatrix provides more granular control over web requests than uBlock. If you want to use uBlock and uMatrix together, it is recommended to use uBlock in easy mode. The following article breaks down the necessary configurations to use uBlock and uMatrix together:

https://12bytes.org/articles/tech/firefox/firefoxgecko-configuration-guide-for-privacy-and-performance-buffs/comment-page-10

There are many more tools for web browsers regarding web tracking, privacy and security. I personally use the above mentioned add-ons for a while now and i am very happy with it!

Basic security 101 : rules everyone should adopt

here are some basic security rules everyone should adopt.

Backup of your data:

  • keep regular backups of your data outside of your computer
  • if you wanna put your backup in a cloud, you should encrypt your data before

Software update:

  • keep your operating system, browser, antivirus and other software up-to-date

Strengthen your passwords and guard them:

  • dont use same passwords
  • don’t use trivial passwords, and other info that can be obtained elsewhere
  • use long passwords with mixed case, numerals, and special characters
  • use a password manager

Anti Virus Software

  • protect your computer from virus and malware