The Art of Invisibility: The World's Most Famous Hacker Teaches You How to Be Safe in the Age of Big Brother and Big Data

by Kevin D. Mitnick

HTTPS Everywhere can force https usage whenever possible, even if PFS is not in use.

Then try the test page at http://benwerd.com/lab/geo.php. This is one of many test sites that will tell you whether your browser is reporting your location.

In Firefox, type “about: config” in the URL address bar. Scroll down to “geo” and change the setting

In Chrome, go to Options>Under the Hood>Content Settings>Location. There’s a “Do not allow any site to track my physical location”

In Google Chrome, check the plug-in’s built-in setting called “emulate geolocation coordinates.” While in Chrome, press Ctrl+Shift+I on Windows or Cmd+Option+I on Mac to open the Chrome Developer Tools.

dots at the top right of the Console, then select more tools>sensors. A sensor tab will open. This allows you to define the exact latitude and longitude you want to share. You can use the location of a famous landmark

Proxies are not bulletproof, however. When you use a proxy, remember that each browser must be manually configured to point to the proxy service.

But the best way to prevent JavaScript injection from monitoring you via your browser is to use the HTTPS Everywhere plug-in (see here).

Even if you are not logged in to your Microsoft, Yahoo, or Google accounts, your IP address is still tied to each search engine request. One way to avoid this one-to-one match is to use the Google-proxy startpage.com or the search engine DuckDuckGo instead.

Take a moment and surf over to Panopticlick.com. This is a site built by the Electronic Frontier Foundation that will determine just how common or unique your browser configuration is compared to others, based on what’s running on your PC

Mozilla’s Firefox offers one of the best defenses against third-party tracking through a plug-in called NoScript.4 This add-on effectively blocks just about everything considered harmful to your computer and browser, namely, Flash and JavaScript.

For its part, Chrome has ScriptBlock,5 which allows you to defensively block the use of scripts on a Web page.

such as the one at piriform.com/ccleaner, to help manage your cookies easily.

There are two specific super cookies that live outside your browser that you can delete—Flash, from Adobe, and Silverlight, from Microsoft. Neither of these super cookies expires. And it is generally safe to delete them.11

Fortunately there are browser extensions that block Facebook services on third-party sites, e.g., Facebook Disconnect for Chrome16 and Facebook Privacy List for Adblock Plus (which works with both Firefox and Chrome).

there are plug-ins for your browser that can block it. For Firefox there’s CanvasBlocker.21 For Google Chrome there’s CanvasFingerprintBlock.22 Even the Tor project has added its own anticanvas technology to its browser.23