>connects to site with NoScript
>nothing loads
>checkmate 😎This is actually much worse for privacy than leaving everything stock, because a site can tell you aren’t downloading or running any javascript, and that immediately puts you in an extremely tiny bucket of people it needs to differentiate from, making any differences visible via IP/TCP/TLS/HTML/CSS much more unique.
And yes, fingerprinting is possible with just HTML and/or CSS… I would argue even moreso without JS.
Fingerprinting can usually identify you uniquely. So even if only two people in the world were using NoScript, it would still be more private than getting fingerprinted.
Edit: btw I’m talking about Javascript fingerprinting. Other methods like HTML and CSS are far less effective and rarely seen in the wild.
IMO “more private” is pointless when you’re still unique either way
If you use Tor + NoScript, you won’t be unique. You’ll blend in with the other Tor + NoScript users, of which there’s probably hundreds
If you use Tor + NoScript, you won’t be unique
Hard disagree, there are still ways to uniquely fingerprint you.
Pray tell
FYI if you are talking about HTML and CSS fingerprinting, I have never seen them used in the wild, and they are trivially detectable (for example a bunch of hidden :hover elements on the page), so Tor Browser would add defenses if they did start appearing in the wild.
Is there a fingerprint randomizing browser or plugin yet? Last time I lazily researched it there just wasn’t one good enough, I keep limping along with ublock and umatrix and all that.
AFAIK (which isn’t much), LibreWolf does this by standardizing all it’s ‘outputs’ so no one can tell either browser apart. As long as you don’t change anything that is.
Giving up umatrix would be hard, but maybe this’d replace DDG for my “I just need this site to work right now” browser 🤔
DON’T BOTHER
uMatrix ⚠️ No longer maintained, the last release was Sept 2019 except for a one-off patch to fix a vulnerability
Everything uMatrix did can be covered by prefs or other extensions: use uBlock Origin for any content blocking.
https://github.com/arkenfox/user.js/wiki/4.1-Extensions#-dont-bother
Okay but what “other extension” let’s me hyperactively manage which exact domains I allow requests to? 🙃
uBlock Origin.
Not the same function, I use both already.
It’s what I always use if I’m ordering anything online, especially if the site I’m interacting with has like 17 different scripts it needs to function properly, or has been shown to play high pitched sounds through your speakers to connect your desktop session with your phone (aliexpress). >…>
Ah, no official Android version, boo.
Other than that the site can tell it is Librewolf.
Although, I opened amiunique.org in 2 different ways and the audio data and canvas footprints were showing up to be unique in both. So unless they are randomising it on every start, it is not standard enough.While on firefox (on a close enough version), the Audio data was coming unsupported, which made it ~30% similarity ratio. On checking now though, the Audio data is visible with firefox.
What made my browser unique was the Canvas and the List of fonts. The latter tends to change every now and then without me doing anything special, because I just downloaded too many fonts.
The receipt
Putting it together: roughly 1 in 132.1 million browsers look like yours. None of this used a cookie
Second visit: We’ve met before
I’ve seen you before, you first showed up earlier today. This is visit number 2. And you came straight here, no link, no search. You remembered the URL by heart. That is almost sweet.how?
And you cleared some of it, 2 of my hiding places were empty when you arrived. I restored them from the ones you missed. This is what tracking looks like without cookies.how?
I came back 1 min later and it didn’t recognize me. Still perfectible. Even though I’m 1 in 200 millions apparently.
Almost all of the data it showed me was inaccurate, whew. Firefox doing a good job there.
That helps less than you’d think, fingerprinting doesn’t need to be accurate,
incorrect, it needs to be very accurate if it’s actually going to track you. If you block tracking scripts and all a website can do is fingerprint you then they’re getting nothing besides “you read this article” or “you visited this page” with no way to sell that data. noticeably the ad sales section was almost completely empty for me. If a single bit of my information changes the previous fingerprint was completely useless.
also this site is just making shit up 😂
output when I typed a single letter at a type with half a second between each, and quit the sentence as soon as it said I could:
Your typing rhythm is steady and practised, you spend a lot of time at a keyboard.how? You type at about 45 words a minute.how?
output when I typed full speed
Your typing rhythm is uneven, hunt-and-peck, or you were distracted.how? You type at about 105 words a minute.how?
Timezone America/Denver 0.8% of people - 1 in 297,619
is just laughably incorrect though. maybe it’s based on how many people have actually visited the site like that? but most people have multiple devices, if not a work computer and cell phone at minimum. that would mean only 150k people have
America/Denveras their time zone, when the reality is probably 10-15 million, so this number is actually more like 1 in 20-30million
firefox nicely randomizes output between runs, so it was 16core the first time, 8 core the second time.
finally this “1 in x” is just laughably wrong. it always says 1 in 133.2 million, even if I give it more data like the size of my screen (which is 1 in tens of millions).
not saying that fingerprinting doesn’t work, it obviously does, but this site is shit and doesn’t prove that point at all.
Doesn’t remember me using Firefox Focus, which is the point of that browser. Pegged me at 1:119M.
First time here, and you typed the link in yourself, bold. Either way, I’ll remember you now. That’s rather the point.how?
nope, clicked a link on lemmy
Holly f…
But Fred Durst did it all for the cookie!
