Try eff. Follow their advice, test your browser, see if there are priorities to act on https://coveryourtracks.eff.org/
this post was submitted on 05 Sep 2026
41 points (100.0% liked)
No Stupid Questions
49785 readers
1253 users here now
No such thing. Ask away!
!nostupidquestions is a community dedicated to being helpful and answering each others' questions on various topics.
The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:
Rules (interactive)
Rule 1- All posts must be legitimate questions. All post titles must include a question.
All posts must be legitimate questions, and all post titles must include a question. Questions that are joke or trolling questions, memes, song lyrics as title, etc. are not allowed here. See Rule 6 for all exceptions.
Rule 2- Your question subject cannot be illegal or NSFW material.
Your question subject cannot be illegal or NSFW material. You will be warned first, banned second.
Rule 3- Do not seek mental, medical and professional help here.
Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.
Rule 4- No self promotion or upvote-farming of any kind.
That's it.
Rule 5- No baiting or sealioning or promoting an agenda.
Questions which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.
Rule 6- Regarding META posts and joke questions.
Provided it is about the community itself, you may post non-question posts using the [META] tag on your post title.
On fridays, you are allowed to post meme and troll questions, on the condition that it's in text format only, and conforms with our other rules. These posts MUST include the [NSQ Friday] tag in their title.
If you post a serious question on friday and are looking only for legitimate answers, then please include the [Serious] tag on your post. Irrelevant replies will then be removed by moderators.
Rule 7- You can't intentionally annoy, mock, or harass other members.
If you intentionally annoy, mock, harass, or discriminate against any individual member, you will be removed.
Likewise, if you are a member, sympathiser or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people, and you were provably vocal about your hate, then you will be banned on sight.
Rule 8- All comments should try to stay relevant to their parent content.
Rule 9- Reposts from other platforms are not allowed.
Let everyone have their own content.
Rule 10- Majority of bots aren't allowed to participate here. This includes using AI responses and summaries.
Credits
Our breathtaking icon was bestowed upon us by @Cevilia!
The greatest banner of all time: by @TheOneWithTheHair!
founded 3 years ago
MODERATORS
I mean. Yeah, technically, but go on and try it. Most of the web won't work for you anymore. And you'll still be tracked by pixels. You can pair the disablement with a tracker blocker to get those, but then a good blocker also handles fingerprinting scripts, so then what was the point?
It’s a technical arms race and good hygiene to review code from untrusted third-parties.
Can't review code if you don't know how to. Are we meant to throw the source into AI and go, "hey is this safe"? While it may work, the time and effort sometimes isn't. It's literally being stuck between a rock and a hard place, so-to-speak. And before anyone says, "well, you should learn code", I hear you. All due respect to those that can, I'm not taking the time because I don't have time. I'm surviving from high gas prices, high grocery prices, higher bills (with for-profit companies reporting their best ever profits YOY), and keeping afloat. "Ain't nobody got time fo dat."
Anyone who knows the first thing about web dev knows this is pointless. The scripts are minified and mangled so far it's impossible to suss out what they do without hours and hours of deobfuscation per script, and it can often be hundreds of scripts. The only thing you can do is use blockers. They don't try to understand what the script does, they operate by blocking known stuff and known bad origins.
Yeah, people don't seem to realize that their technical solutions don't matter.
Tracking and privacy is a problem that can only be solved through legislation and legal means. Big companies have more resources and can work around any technical hurdle you throw up.
Like they don't even have to work around them technically... Oh you like the encrypted messenger? It would be a shame if they were able to make it useless by convincing everyone to just use their DM system leaving no one on your encrypted messaging network to talk to, wouldn't it?
I think that disabling JS is worth the price (imo), that doesn't annoy me very much Also, I believe tracker blockers can sometime fail to block fingerprinting scripts cause they're could come from unknown domain
Blocking JS will increase fingerprint accuracy, but...
I can't imagine browsing with all js allowed by default anymore. It's painful.
With NoScript and Ublock my browsing experience is just so much better - stupid videos don't autoplay, the screen doesn't do weird reflow once it fully loads, etc.
That looks much better. I already use uBlock Origin, but now I will disable JS by default too ig!
Since you mentioned Ublock-Origin. I would recommend to disable 3rd party Iframes. That will mean tweets, youtube videos will not play by default but you can manually whitelist them at global or site local way if desired. Not loading Iframes by default should reduce the amount of trackers and potential malware that could be loaded from compromised sites.
You can see what level of blocking you can use according to your convenience here: https://github.com/gorhill/uBlock/wiki/Blocking-mode
Just blocked iframes. Thanks!
I bookmarked your reply to come back later when I have time, thanks !
I don't have an answer to your question but I tend to agree with what you wrote.
However - is fingerprinting the only thing to worry about on the www? I'd say not.
Disabling javascript by default is a good way to be able to click links without running the risk of getting pwned by some rogue script.
Then I use an addon* that shows me all the 3rd party shit the site would've wanted to load, and if it looks OK to me I then enable javascript. The addon can remember this if I want to, so I don't have to do it every time for that particular site.
Esp. with news articles js is often not even required to read the article itself. Or I can see content that becomes invisible when js is enabled.
FWIW, the developers of Tor browser are experts in being anonymous online, and they disable js by default. While it might make me more unique, js has enormous capabilities in collecting all sorts of data from my machine, and - I guess - that's why disabling it makes me more anonymous in the end. Just a hunch.
* uBlock Origin in expert mode
I also block js and for most pages I only enable the scripts which are needed. After a few pages you will get feel.
It feels nice that I don’t need to enable a random script from oneClickTrackYouAndSellYourData.com and enable only the scripts needed for functionality.
I guess I will disable it too!
This is Information Theory at work. You’re compacting (n+1) signals, where n is any number between 1 and infinity, to 1. With javascript execution, anyone can get timing, webgl, location, device hardware access, etc.. Without it, they just get a single bit that tells them to fuck off.
Good point!
Firefox has few tricks to prevent finger printing
- There is a built in finger printing protection which helps a little bit but not perfect
- There is containers: Putting different websites into different containers isolate them from one another so for example opening a website selling toys in one container would prevent your facebook account that is running in different container from knowing about this fact.
- There is an extension called NoScript. This allow you to do what you want (block javascript) but since - as many others said - 99% of website won't work without javascript, u could selectively allow certain javascript from certain domains while blocking others. By default all javascript are blocked but then u test enabling some to see what is the absolute minimum for certain website to work. NoScript remembers your selections so you only need to do it once per website.
I will use uBlock Origin and whitelist websites I trust
Thanks for your tips !
You're very welcome!
Why not use a security based OS on a thumb drive and boot into it for surfing privately. There was one I played with a while ago but forgot the name.
Tails or Qubes probably.
Thank you, it was tails.
I sometimes use Tails, but the fact that it wipes every files on shutdown is kinda annoying imo