What is vulnerable in this browser setup to avoid fingerprinting/tracking for general browsing that is still easy to use?
The setup is as follows:
Firefox on my personal machine with several profiles (3-5 profiles)--each profile is dedicated to certain aspects of my browsing (i.e. one for social media only, another for banking, another for purely "anonymous" browsing where I don't specify any of my personal info or login to accounts tied to my real identity, etc.
As for cookies, they are deleted after every session. If I have profiles that are only dedicated to a single website that requires login (and therefore requires cookies), then that cookie might not even need to be deleted because I don't see how it would provide any more information than what you providing to the company of the service you're using (i.e. what's the point of deleting Facebook cookie for a profile if that's the only site you're using on that profile? There's nothing for the cookie to track).
For evercookies, they apparently can be deleted just by enabling the option to delete cookies at end of session from Firefox (I've tested this)--they are only seem to be persistent if you use plugins. As for HSTS fingerprinting, Firefox's implementation currently forces you to choose between privacy and security. I choose security and therefore enabled HSTS so sites can be tracked in a given session. I empty the contents of SiteSecurityServiceState.txt when I initiate system shutdown so at least you get a new fingerprint.
a user.js file that disables WebRTC, OpenGL, and geolocation.
Finally, for each profile, they will be tunneled through a separate exit node (proxy/VPN) that may or may not be changed frequently.
How effective is this browser setup? There are several things I'm concerned with:
This setup does not use virtual machines--perhaps there are kinds of fingerprintable information regarding the machine itself I did not take into account for and it might not match all the information that I attempted to spoof for each profile. For example, how would using virtual machines be an advantage over the setup I've described?