Pre-configuring settings for portable/anonymous use

[ghost]

I want to pre-configure built-in settings, custom flag, and extensions for portable (anonymous logon) mode. How do I do that? There should be no salts, dates, timestamps, user or machine identifiers.

[uazo]

Tell me what you would change.

[ghost]

I can't expect you to pre-configure anything for me as my desires may change, but a template or even a configurator of settings makes sense.

As far as examples go, I'd like to change default Timezon override to Random for each page, enable QUIC in Chrome:Flags, have uBlock Origin load by default with an updated custom filter list. If I can have a template that does all that, I think I can follow it to make other changes on my own.

[uazo]

i already intend to modify the cromite defaults. i would like to work out with you which ones would be most appropriate and make them defaults for everyone.
I'm just asking for a comparison. for example:

• Timezon override to Random for each page: I agree.
• enable QUIC: is already active by default.
• uBlock Origin load by default with an updated custom filter list: let's see it.

[ghost]

Personal preferences for anonymous use:
History Threshold - 0 days
HTTP Referer Header Policy - Disable All Referrers
Clear Browser Data - Clear All for "Basic", "Advanced" and "At Close"
Always Use Secure Connections - Enabled
Disable Secure DNS - Enabled
Site Settings - Disable All, except for "Sound" and "On-Device Site Data", set "Timezone Override" to "Random for Each Page"
Memory Saver - Disable
Search Engine - DuckDuckGo
AdBlock Plus - Disable
Cromite Update Checks - Disable
Use Graphics Acceleration When Available - Disable (due to CVE-2024-2883, which is already patched in Chromium 04/26/2023 update, but ANGLE is additional attack surface)

Chrome Flags:
Allow Cast Device Discovery with DIAL Protocol - Disable
TLS 1.3 Hybridized Kyber Support - Enable
Parallel Downloading - Enable
Maximum Connections per Host - 15
QUIC - Enable
Smooth Scrolling - Enable
GPU Rasterization - Enable
Zero-Copy Rasterizer - Enable
Out-of-Process 2D Canvas Rasterization - Enable
Enables Display Compositor to Use a New GPU Thread - Enable
Reduce Accept-Language Request Header - Enable

Cromite Flags:
Enable IPv6 Probing - Disable
Allow Cleartext Traffic - Disable

Extensions:
uBlockOrigin - "Block CSP Reports" and "Suspend Network Activity Until All Filter Lists are Loaded" enabled, all filters enabled
NoScript - Tor Browser profile settings (because default profile settings are too restrictive and require customization for almost every website)

I am not sure whether it makes any difference or sense to enable Rasterization if "Use Graphics Acceleration When Available" id disabled.

[ghost]

It would also be nice to have Cromite (for portable mode) write all into memory, neither write nor leave any files or registry entries, and encrypt memory it uses similar to how VeraCrypt encrypts memory used to store drive decryption keys.

[ghost]

I also think any custom configuration files should be placed into directory of executable file and not create any profiles in AppData directory user space. Tor Browser does that.

Cromite already creates a type of configuration file I seek, but it adds timestamps, salts, and other identifiers. Me trying to remove those identifiers manually results in corrupt profile that Cromite can't read...

[ghost]

Just to clarify, we need an actual configuration file (XML?) without stamps and/or identifiers in it. It needs to be editable.