Try eff. Follow their advice, test your browser, see if there are priorities to act on https://coveryourtracks.eff.org/
Firefox has few tricks to prevent finger printing
- There is a built in finger printing protection which helps a little bit but not perfect
- There is containers: Putting different websites into different containers isolate them from one another so for example opening a website selling toys in one container would prevent your facebook account that is running in different container from knowing about this fact.
- There is an extension called NoScript. This allow you to do what you want (block javascript) but since - as many others said - 99% of website won't work without javascript, u could selectively allow certain javascript from certain domains while blocking others. By default all javascript are blocked but then u test enabling some to see what is the absolute minimum for certain website to work. NoScript remembers your selections so you only need to do it once per website.
I will use uBlock Origin and whitelist websites I trust
Thanks for your tips !
You're very welcome!
I mean. Yeah, technically, but go on and try it. Most of the web won't work for you anymore. And you'll still be tracked by pixels. You can pair the disablement with a tracker blocker to get those, but then a good blocker also handles fingerprinting scripts, so then what was the point?
It’s a technical arms race and good hygiene to review code from untrusted third-parties.
Can't review code if you don't know how to. Are we meant to throw the source into AI and go, "hey is this safe"? While it may work, the time and effort sometimes isn't. It's literally being stuck between a rock and a hard place, so-to-speak. And before anyone says, "well, you should learn code", I hear you. All due respect to those that can, I'm not taking the time because I don't have time. I'm surviving from high gas prices, high grocery prices, higher bills (with for-profit companies reporting their best ever profits YOY), and keeping afloat. "Ain't nobody got time fo dat."
Anyone who knows the first thing about web dev knows this is pointless. The scripts are minified and mangled so far it's impossible to suss out what they do without hours and hours of deobfuscation per script, and it can often be hundreds of scripts. The only thing you can do is use blockers. They don't try to understand what the script does, they operate by blocking known stuff and known bad origins.
Blocking JS will increase fingerprint accuracy, but...
I can't imagine browsing with all js allowed by default anymore. It's painful.
With NoScript and Ublock my browsing experience is just so much better - stupid videos don't autoplay, the screen doesn't do weird reflow once it fully loads, etc.
That looks much better. I already use uBlock Origin, but now I will disable JS by default too ig!
Since you mentioned Ublock-Origin. I would recommend to disable 3rd party Iframes. That will mean tweets, youtube videos will not play by default but you can manually whitelist them at global or site local way if desired. Not loading Iframes by default should reduce the amount of trackers and potential malware that could be loaded from compromised sites.
You can see what level of blocking you can use according to your convenience here: https://github.com/gorhill/uBlock/wiki/Blocking-mode
Just blocked iframes. Thanks!
I bookmarked your reply to come back later when I have time, thanks !
This is Information Theory at work. You’re compacting (n+1) signals, where n is any number between 1 and infinity, to 1. With javascript execution, anyone can get timing, webgl, location, device hardware access, etc.. Without it, they just get a single bit that tells them to fuck off.
Why not use a security based OS on a thumb drive and boot into it for surfing privately. There was one I played with a while ago but forgot the name.
Tails or Qubes probably.
Thank you, it was tails.
No Stupid Questions
No such thing. Ask away!
!nostupidquestions is a community dedicated to being helpful and answering each others' questions on various topics.
The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:
Rules (interactive)
Rule 1- All posts must be legitimate questions. All post titles must include a question.
All posts must be legitimate questions, and all post titles must include a question. Questions that are joke or trolling questions, memes, song lyrics as title, etc. are not allowed here. See Rule 6 for all exceptions.
Rule 2- Your question subject cannot be illegal or NSFW material.
Your question subject cannot be illegal or NSFW material. You will be warned first, banned second.
Rule 3- Do not seek mental, medical and professional help here.
Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.
Rule 4- No self promotion or upvote-farming of any kind.
That's it.
Rule 5- No baiting or sealioning or promoting an agenda.
Questions which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.
Rule 6- Regarding META posts and joke questions.
Provided it is about the community itself, you may post non-question posts using the [META] tag on your post title.
On fridays, you are allowed to post meme and troll questions, on the condition that it's in text format only, and conforms with our other rules. These posts MUST include the [NSQ Friday] tag in their title.
If you post a serious question on friday and are looking only for legitimate answers, then please include the [Serious] tag on your post. Irrelevant replies will then be removed by moderators.
Rule 7- You can't intentionally annoy, mock, or harass other members.
If you intentionally annoy, mock, harass, or discriminate against any individual member, you will be removed.
Likewise, if you are a member, sympathiser or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people, and you were provably vocal about your hate, then you will be banned on sight.
Rule 8- All comments should try to stay relevant to their parent content.
Rule 9- Reposts from other platforms are not allowed.
Let everyone have their own content.
Rule 10- Majority of bots aren't allowed to participate here. This includes using AI responses and summaries.
Credits
Our breathtaking icon was bestowed upon us by @Cevilia!
The greatest banner of all time: by @TheOneWithTheHair!