Nowadays there are lots of things to consider when talking about “privacy”. Ditching windows for a Linux based system is the first step to take!
If you absolutely can't leave windows because you require it for work for example there are still some things you can do - installing Windows AME for example (removing all windows bullshit to take back control!). But in this article, we will focus on Garuda Linux specific things of course. For more in depth articles on different topics, the corresponding Arch wiki pages will be linked. Even more content can be found at privacytools.io :)
- Installing and enabling the firewall
A firewall is needed to stop people abusing open ports which can lead to them having full device access for example. In Garuda Linux, firewalld is preinstalled in most editions. It can be enabled via systemd:
sudo systemctl enable --now firewalld
An important thing to notice is that services such as KDE Connect or Syncthing will need firewall rules to work as expected as their incoming traffic will be blocked by the firewall as well. To achieve that open up the Firewall application from the start menu.
Another easy, yet effective application for that purpose is UFW and its frontend GUFW.
It can be operated via its GUI or easy terminal commands:
sudo ufw enable
sudo ufw allow ssh
More on this topic can be found here.
- Using alternative DNS servers to block ads and/or analytics.
Using DNS servers is a very easy way to block ads. There are some useful DNS providers such as AdGuard which can be enabled in our Garuda welcome application. Find out what it does here.
As alternative hblock could be used. It blocks ads and malware domains using the /etc/hosts file which blocks the domains locally rather than via a DNS server. ArcoLinux got some more information on this topic.
- Using the right browser
The browser is kind of the middleman between you and the internet - while being able to log every action you take. That's why you should choose carefully here. There are lots of web browsers available so choosing the right one might be a confusing task. Generally speaking, Firefox is most likely the best choice among these nowadays. It's backed by the Mozilla foundation which has a quite good reputation and is easily expandable by add-ons. The other “big” player is Chromium - there are a lot of browsers based on chromium such as Google Chrome or the Brave browser. While the engine Chromium uses still seems to be quicker than Firefox these days it is associated with Google - a company known for massive privacy concerns. A project which tries to cut the Google out of Chromium is Ungoogled Chromium. If you want to use the Chromium engine, this browser will most likely the best bet. Since most Google stuff doesn't exist in this browser you will need this extension to install add-ons from the Web store without other workarounds. It is worth noting that we ship the recommended about:config values for Firefox by default in Garuda Linux.
- Using the right browser addons
Browser add-ons are important and needed these days to have a good experience browsing the internet.
- uBlock Origin. This one is needed to block Ads and malicious domains. If you are asking yourself why we will need this if NextDNS is basically doing the same - uBlock is able to block the ads at website level which means you won't see white spaces - its just like the ad didnt exist. Don't use other “Adblock” add-ons. uBlock Origin can be trusted since its open source.
- HTTPS everywhere. This add-on ensures always using HTTPS connections when browsing the internet. This means, that all traffic will be encrypted, otherwise people can easily read everything you are sending and receiving. In Firefox 83+ this feature has been natively implemented.
- LocalCDN. LocalCDN is a web browser extension that emulates Content Delivery Networks to improve your online privacy. It intercepts traffic, finds supported resources locally, and injects them into the environment. It works well with uBlock Origin and is able to generate rules for this add-on which you should do, just follow its FAQ.
- CanvasBlocker. Browser fingerprinting is quite a problem since it allows companies to identify you even if a VPN service is used due to its unique fingerprint. CanvasBlocker emulates different APIs to protect your data.
- NoScript. Although most people don't use this add-on because its breaks most of the websites by design. It's blocking the use of JavaScript - which most of the content rely on these days. But this means that tracking technologies also won't work for example. The use of this add-on needs manual adjustments to allowed/disallowed contents to be truly usable.
- Using secure passwords
Talking about this topic is important - most people use very easy passwords for their accounts which can be easily brute forced by other people to gain access. Passwords like name1959, password, easy123 and so on fall into this category. You can check here if the password used is secure. Using the same password for every account should also be avoided!
The best way to generate and save passwords is using a password manager such as Bitwarden. Bitwarden is open source so it can be trusted. You can even selfhost your own instance. We provide a self-hosted instance which you can use along with its Firefox add-on. Just change the server used to bitwarden.garudalinux.org and create an account. It also has a mobile client which is very easy to use! Using 3+ different kind of characters and 14+ characters should be secure enough.
- Using the right search engines
Search engines should be chosen carefully. Google, Bing or Yahoo should be avoided these days. Recommended alternatives are for example DuckDuckGo, Startpage.com or Searx. We host a variant of Searx and Whoogle (a meta search using Google search results without tracking the user) for you to use.
One of these as should be set as default search engine in your favorite browser. This can be done via browser settings.