i'm on https://www.privacytools.io/ and noticed tbb version 6.0.4 doesn't modify many of the suggested "Privacy Related about:config Tweaks":
privacy.trackingprotection.enabled = true This is Mozilla’s new built in tracking protection. geo.enabled = false Disables geolocation. browser.safebrowsing.enabled = false Disable Google Safe Browsing and phishing protection. Security risk, but privacy improvement. browser.safebrowsing.malware.enabled = false Disable Google Safe Browsing malware checks. Security risk, but privacy improvement. dom.event.clipboardevents.enabled = false Disable that websites can get notifications if you copy, paste, or cut something from a web page, and it lets them know which part of the page had been selected. network.cookie.cookieBehavior = 1 Disable cookies 0 = Accept all cookies by default 1 = Only accept from the originating site (block third party cookies) 2 = Block all cookies by default network.cookie.lifetimePolicy = 2 cookies are deleted at the end of the session 0 = Accept cookies normally 1 = Prompt for each cookie 2 = Accept for current session only 3 = Accept for N days browser.cache.offline.enable = false Disables offline cache. browser.send_pings = false The attribute would be useful for letting websites track visitors’ clicks. webgl.disabled = true WebGL is a potential security risk. Source dom.battery.enabled = false Website owners can track the battery status of your device. Source browser.sessionstore.max_tabs_undo = 0 Even with Firefox set to not remember history, your closed tabs are stored temporarily at Menu -> History -> Recently Closed Tabs.
many of the tweaks seem justified, especially the "browser.safebrowsing.enabled". is there any reason why the tbb devs leave these settings as is? i'm sure there's some logical reasoning for it, it's just not apparent.