Online Tutorial: Building & Selecting Safer Web Browsers

As I was going about re-configuring my website and domains earlier this week I noticed something very interesting, while my SSL Certificate was in the process of being authenticated I was able to access my unsecured website on every web browser except for one; Mozilla Firefox – which would not allow me to connect to the web page in order to keep me protected.

Just so you understand what I am talking about here, browsers like Microsoft Edge, Google Chrome and Apple Safari will all freely allow you to access a web page which has the potential to compromise your security – including websites which do not have an authenticated or verified SSL Certificates. This is because these web browsers are configured to be “convenient” and easy to use, security is either nonexistent or an afterthought on these particular browsers. With that said, there are a number of web browsers out there specifically designed around security, which also happen to be equally as easy to use/operate. Here are some of those browsers, along with some other helpful information to help you make more informed security choices online in the future.

Mozilla Firefox

Mozilla Firefox is considered by some to be the world’s most secure web browser. I say “some” specifically because many people would argue that Tor is actually the most secure browser out there. However, without Mozilla Firefox the Tor browser wouldn’t even exist. This is because Tor uses the source code of Firefox as the foundation to build their browser. As for why I personally consider Firefox more secure than Tor, this is because the DarkNet is inherently a much more dangerous place than the ClearNet, and you can’t access the DarkNet or Deep Web on Mozilla Firefox alone. Browsing through and interacting with the Deep Web, even while using Tor, naturally puts you and your security at a much higher risk.

What makes Firefox particularly unique is that much like, the browser allows you to install various Add-Ons, extensions or plugins that can help you maximize your security. For the purposes of this article, if you are going to use Mozilla Firefox, I highly recommend that you install NoScript, HTTPS Everywhere, Ad Blocker Ultimate and Disable WebRTC connections. There are more plugins than I could possibly mention here, those are just some of the most important ones you can install specifically in terms of online security.

WebRTC is a little talked about “glitch” that allows third parties to circumvent your security and compromise your systems, even when you are using a VPN or Proxy service. As of today, Mozilla is the only web platform I am aware of that allows you to disable all WebRTC connections entirely. By comparison, other browsers like Google Chrome literally ban people from disabling WebRTC connections through their browser, as to allow US “authorities” like the NSA and FBI to more easily hack and track users online if need be. However, non-Government hackers exploit WebRTC all the same as Federal hackers, and for all the same reasons.

Download Firefox Here:


I understand that the Tor Browser has gone on to develop a slightly negative reputation in today’s society but, believe it or not, the Tor Project was first developed by and still receives a majority of its funding from the United States Department of Defense. It is important to understand that even though some people use Tor to do some pretty bad or illegal things, just like anything else in life, the browser is only what you make of it.

Tor was not developed for criminals, it was first developed by the US Government in order to keep agents, operatives and members of the Armed Forces safe and secure online. It just so happens that over time the browser and its systems were hijacked by criminals and terrorists alike, whom also need to remain hidden and secure online for many of the same reasons as Government employees.

The Tor browser works by bouncing your internet connection through thousands of individual “proxy servers” around the world on a perpetual randomized time loop. At any given moment in time your internet connection could be bouncing from Thailand to Venezuela to Canada and theoretically anywhere in between, concealing your computers identity and making your internet activity essentially impossible to trace. In addition to redirecting your internet traffic away from the eyes of your Internet Service Provider, it also conceals the IP Address of the computer you are using behind a proxy. This is particularly important/valuable for political activists and human rights defenders living in oppressive countries all around there world, where peoples online activity can get them arrested or killed. Since the browser directs all of you online activity to different countries around the world, this allows activists to remain hidden from their Governments while also granting them access to any sites banned or restricted by their respective Governments.

It is important to note that Tor is perhaps the best web browser at preventing or deflecting an active hacking attempt against your computer. However, I would never use Tor for things like credit card transactions or editing/customizing your personal website. This is because anytime you are using a proxy you are using someone else’s connection. While this may hide your internet activity from 3rd parties, it makes you internet activity available specifically to the owner of whatever proxy server you happen to be using at that time, and not every proxy server exists with honorable intentions – though “most” Tor exit node operators tend to be trusted activists.

Download Tor Here:


Opera is a little known web browser that has traditionally had a minuscule following throughout the past. However, in 2016, Opera started to gain a more main stream following, particularly with the cyber security community, after the browser started to become standard with a built in VPN. This means that the Opera browser stands in front of your computers IP Address while you browse the internet and your activity will remain hidden from your Internet Service Provider and/or 3rd parties. While the VPN is far from the strongest of safest on the market, it is still a very unique feature that has helped the browser grow in popularity over the years.

Download Opera Here:

Epic Privacy Browser

One of the newer browsers on the market, Epic is specifically designed around online security. Each time you close the browser all of your cookies and tracking information is automatically deleted, preventing any websites from remembering or recording your previous activity. Similar to Opera, the Epic Privacy Browser also connects your computer through the companies own servers, acting as a proxy service for your device. This prevents any hackers/websites from recording the IP Address of the device you are using to browse the internet. Additionally, much like Mozilla, the browser will not allow you to connect with or access any site that does not have a recognized SSL Certificate.

Download Epic Here:

Browser History, Cache & Cookie Management

If someone gains access to your computer for malicious reasons one of the first things they are going to want to do is check your browser history to gain access to websites and accounts that you frequent the most. Just think for a moment about all the pages you visit online, that you do not need to log into every time you visit. While this may be convenient for your personal browsing habits, it is also very convenient for hackers.

For this reason, you should always delete your browser history and clear all browser cookies on a fairly regular basis. You would be surprised to know how much information your browser stores/remembers about you, until you delete it all. Please note that some browsers offer to delete cache and cookies through the settings menu and some anti-virus programs also offer to do the same. However, if you cannot find or do not own these programs, one of the best programs to clear history, cookies, cache and everything else is known as CCleaner and it is completely free and open source for anyone to own. The “C” in CCleaner literally stands for “Crap,” because the program deletes all of the useless crap your computer happens to store about you. The program itself is entirely free to own, but it is one of the most effective programs on the market. For example, even multi-billion dollar tech companies are known to use the program on a regular basis.

Download CCleaner Here:

Exclusive: Remembering Ukraine’s Attempted Cover Up of Susan Rice & The UAE’s Illegal Weapons Shipments To Libya

Earlier this week I featured a report originally published by Amnesty International, discussing how various War Crimes are currently being carried by forces representing the United Arab Emirates in Yemen – primarily enabled by weapon shipments made available to them by the United States and European allies. As the report was quick to point out, nearly all of these arms transfers constitute violations of international law and various internationally negotiated treaties surrounding the delivery of weapons into War zones, especially in light of how these weapons ultimately wind up being used.

Now, I’m not exactly sure why it didn’t dawn on me until hours after publishing the original article, but the whole ordeal reminded me of a separate instance involving the UAE in 2017 – in which various international partners were co-conspirators in the violation of international law, also involving the illegal transfer of weapons and munitions from Western allies/powers to the UAE. For those of you whom do not remember, back in June of 2017 the UAE’s ambassador to the United States, Yousef Otaiba, had his emails hacked and leaked online by an unknown group hackers flying under the flag of “Global Leaks” – allegedly with close ties to Russia. Most notably exposed within the leaked material, at least in my opinion, were exchanges between Otaiba and then National Security adviser to Barack Obama, Susan Rice, discussing the arrival of “military equipment” to Libya in 2014 – equipment originally shipped from the United States but arriving in Libya via cargo planes from the UAE.

The Leak

While the emails have since been taken down, copies of the exchange between Rice and Otaiba read “MBZ asked me to inform you that we will be sending ‘equipment’ to our friends in the western part of Libya in the next 2-3 days. They will arrive in a UAE cargo aircraft and will be escorted by a UAE military contingent, just to insure safe passage. He just wanted me to give you a heads up this will be happening so that no one is caught off guard.” To which Susan Rice simply responded “Roger. Thanks.

As a report from Middle East Eye about the leaked material in question also outlined at the time, “while the words “weapons” or “arms” were not specifically mentioned, the 2014 correspondence roughly tracks a UN Security Council report leaked to MEE in June saying the UAE had illegally shipped weapons to rebels loyal to military leader Khalifa Haftar.” Explaining how “the UN has kept Libya under an arms embargo since the 2011 uprising that drove then leader Muammar Gaddafi from power, but the Security Council report details a “general increase in direct foreign support to armed factions in Libya” – including from the United States, the highest ranking member of the UN Security Council.

A later report presented to the United Nations in 2017 documented the arrival of 9 helicopters, 4 of which were heavily armed and designed for combat, a Mi-24 Hind gunship, a AT-802i single-engine light attack plane, as well as more than 500 military vehicles – including 90 armored personnel carriers. The report also details how, after its initial arrival, the AT-802i aircraft, originally designed to fight fires, had been re-fabricated and made into “a counter-insurgency and strike aircraft.” Moreover, following the conclusion of these initial deliveries, investigators also documented the delivery of 48 additional aircraft into Libya, all directly shipped to the country from the UAE between the years of 2014-2017.

As for where the ‘equipment‘ was actually delivered and to whom, the report indicates that the Libyan National Army (LNA) was the primary recipient – largely stationed throughout Eastern Libya, but heavily concentrated in the Eastern city of Tobruk. This is also particularly interesting to note because the country of Libya had been under a complete arms embargo by both the United Nations and NATO dating back to 2011 – quite literally making these shipments violations of international law.

Download Full 2017 Arms Report Presented To UN:
2011 Arms Embargo from United Nations:
2011 Arms Embargo from NATO:

The Cyber Attack Which Followed

Around that time, in September 2017, what I remember standing out to me most was coming under heavy assault from Ukrainian hackers – presumably for hosting screen shots of the leaked material well after Global Leaks had their domain shutdown and all of the content from it was scrubbed offline. I say this because the attackers attempting to launch cyber attacks against my website were all trying to leverage a single URL address, a URL address featuring my reporting on/of the leaked material described above. To this day, no one has ever gotten closer to hacking any one of my websites or social platforms than those Ukrainian hackers did that week, the week of September 15th 2017.

To accomplish this, hackers launched something known as an Edge Side Includes (ESI) attack in order to execute a CrossSite Scripting (XSS) attack via the syndicated connection between my WordPress publishing dashboard and Twitter account. In fact, if not for the legacy No Script browser extension installed on my Mozilla Firefox, first alerting me to the attempted attack, the hackers would have actually been successful in getting through. What’s perhaps even more interesting to note is that I managed to absorb and mitigate these attacks a little less than 9 months before they were first “discovered” by researchers working for GoSecure in April 2018.

Fortunately though, as fate would have it, there was no soup to be had for those Ukrainian hackers/dick eaters, and not a single one of them ever managed to get through or take down my site. Still though, I contend that I learned more about website security/vulnerabilities that week than any week prior. So, in a messed up kind of way, I guess I should almost thank them for what they did – though I never could quite figure why Ukrainians were trying so hard to cover for Susan Rice? I also wish I could remember or that I had saved it somewhere at the time, because I distinctly remember tracing one of the IP’s behind the attack directly back to a mayor’s office/address in Ukraine – though I can not accurately specify which or to whom accurately here today.

While I did have to blacklist the entire country of Ukraine to seal off portions of the attack at one point, Rogue Security Labs recently mitigated a similar Varnish Cache attack in October 2018 – essentially utilizing many of the same methodologies to mitigate the attack as I once did for Ukraine’s ESI and XSS attacks in 2017. If you would like to read more about these strategies, as well as how to implement them for yourself, you are invited to learn more through the threat analysis and security tutorial provided below.

Learn More – Advanced Caching Attack Spotted Targeting WordPress Owners:

Browser Security Strategies – Including Mozilla: