i hatte fingerprinting so bad and survalince marketing/predictive policing (not a criminal but live in usa) but EVERY SITE wants javascript even the privacy ones (proton and tuta)

also i torrent and download stuff will mullvad browser (and vpn) help not to be de-anonymized

  • TrollAccount69@lemmy.ml
    link
    fedilink
    arrow-up
    1
    arrow-down
    2
    ·
    4 hours ago

    My “not a criminal” post seems to be raising a bunch of questions answered by my “not a criminal” post.

  • Browse8474@lemmy.world
    link
    fedilink
    arrow-up
    9
    ·
    1 day ago

    I just use JShelter, It adjusts certain features by adding lies or faking the info they give out.

    I’ve always thought having javascript totally disabled / on a whitelist basis makes you identifiable more.

    I guess it all depends on your threat model.

    • eldavi@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      ·
      5 hours ago

      I’ve always thought having javascript totally disabled / on a whitelist basis makes you identifiable more.

      is advertising a threat model?

    • FineCoatMummy@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      1
      ·
      1 day ago

      I’ve always thought having javascript totally disabled / on a whitelist basis makes you identifiable more.

      It’s complicated. That can be true. But it is often not true.

      For a total JS disable, that almost certainly makes you less identifiable. I.e, improves your privacy. It is true that JS-disable is a fingerprint. But it gives the -log2(%-who-do-that) bits of identifying info. If you prevent more bits than that from being obtained via JS, it is a net win. And JS has very powerful ways to fingerprint, and collect more bits than that log2(%) value. Thus, it is normally a privacy win to fully disable JS. Despite it putting you into a small cohort. That cohort is still bigger than the cohort the JS can bucket you into.

      But your other case, disabling some JS, that might make you more ID-able. If you disable the same subset as most other ppl, it won’t. But if the set you disable is specific to you, then that can provide enough signal to overwhelm the improvement. In that case it can hurt your privacy.

      There is not a simple yes/no answer. Which everyone wants to have. “It’s true!” “No it’s not!” “Yes it it!” Really, it depends. We must consider the factors, to know the answer. Which will vary for each person and circumstance.

      • Browse8474@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        1 day ago

        Yeah very complicated.

        It can be the same with add-on configuration like uBlock much in the same way.

        If you stick to the default config you’re more likely to be the same as most users however it’s also not extremely uncommon for people to have the same adjustments made be that lists or other settings.

        The Mullvad browser is setup with this methodology, you can look the same as others if you stick to their default setup.

        Like you say, Different factors can mess everything along with the users specific thread model.

      • Browse8474@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        1 day ago

        I cannot fully understand the page but it appears to use under 10MB of memory. I could be not reading it all correctly though.

        about:memory in Firefox based browsers, Click measure and it’ll list all the memory allocations of the browser.

  • FineCoatMummy@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    4
    ·
    1 day ago

    It will depend on the site.

    Some sites you can totally disable JS, and they work fine. Often better! It can avoid the annoyware in so many sites now.

    Other sites require JS for basic functionality. But also have tons of tracking JS. On those you can disable the tracking JS and run only what is required.

    Yet other sites are such a clusterfuck from many 100’s of demains and it can be hard or impossible to unravel what is needed. Those I try to avoid the site if I can.

    Someone always will say disabling JS is a fingerprint too. Which is true, but misleading, b/c you can reduce the bits of info more by disabling JS than the bits obtained by the site seeing you disabled JS.