AceSLS

joined 2 years ago
[–] AceSLS@ani.social 19 points 1 year ago* (last edited 1 year ago) (9 children)

Well, this is a way to vast topic to explain everything here but I'll try and summarize the most important things:

Let me first explain how websites are able to "fingerprint" you: It's basically just collecting as much data as possible about your device. Simple things like your browsers size (in pixels), your screen size, your CPU's core count an many, many more. Having all this data makes it possible for websites to create a profile that only matches one of your specific devices (world wide!). Some websites/fingerprinters even go as far as scanning your local network for other devices, which could even tell them where you live, with whom etc. This wouldn' be such a big deal if every website had their own database, but almost every page uses ads from Amazon, Meta or Google which makes these companies able to reliably track most of your internet usage even across different devices

So fingerprinters can be very intrusive nowadays, the best way to be anonymous is for everyone to share the same fingerprint which is what the tor browser tries to attempt. Obviously this needs everyone to conform to some predefined norms to work, otherwise you'll become an outlier which can be tracked again

Tor browser sadly is very slow and by definition not very customizable, so I chose to forsake it in favor of Librewolf in combination with uBlock Origin in Strict Mode, all filterlists and all privacy settings enabled. Additionally I use JShelter to restrict websites Javascript usage and spoof some of the data which can be fingerprinted. Also for Android I use Firefox with some settings from the Arkenfox user.js (Librewolf uses this by default, I mostly use DNS over TLS and Resist Fingerprinting) and Firefox's own Enhanced Tracking Protection in Strict mode. Additionally I like LibRedirect to access Reddit when I need to without having to login.

This setup stops most fingerprinters from even being loaded, those that still get loaded won't run most of the time. It also sadly doesn't work very well with pages behind Cloudflare, so you sadly need to (temporarily) disable some protections to get arround cloudflares captcha (or alternatively delete the webpages cookies each time you request another page from the same domain, this can be automated with addons/Firefox)

Keep in mind though that my setup might be considered pretty overkill by most and that privacy is a spectrum. It's possible to block all tracking, but that would make almost the whole web unusable so keep that in mind. Your goal should be to limit the data that can be harvested from you to an acceptable degree, not to eliminate it. Most of the time this is a tradeoff of convenience vs privacy

If you wanna learn more look arround uBlock Origin Wiki, the Arkenfox user.js Wiki and the JShelter webpage

Additionally here's some websites to test your overall fingerprintability:

  • Browserleaks (My favorite, as it explains most things it shows you)
  • Cover your tracks: Let's you look at your fingerprint generated by real tracking companies, mine is unique but changes every browser session (restarting my browser/wiping the pages cookies)
  • CreepJS: Strongest fingerpriner I have found to date, almost impossible to fool. Goes as far as knowing when your browser lies about some things and much more!
  • IPLeak: Some more identifiable information about your ip address and DNS settings

Shoutout to LibreJS as well, sadly it breaks wayyy to many websites without doing endless tweaking for me to consider it usable and also LocalCDN

Also to finish this I should tell you that I'm by no means an expert and that you should do your own research. Having a semi random fingerprint can itself be a trackable vector but atleast I feel safe enough doing it this way

Feel free to ask more if something's unclear/you want to know some more about privacy outside of your browser

[–] AceSLS@ani.social 2 points 1 year ago (1 children)

... and then copy that into an encrypted cloud drive.

If you care about privacy you should encrypt the files first and then upload it to the cloud

[–] AceSLS@ani.social 2 points 1 year ago

They can try to block crawlers all they want

They will not succeed without restricting access to Reddit to an unusable degree, since crawlers can be coded to imitate real users close enough. Combine that with enough proxies and they can't do jack shit

Also you could get arround the Referer header quite easily via redirects (unless Reddit went ahead and used a Whitelist for those, which again would be a very stupid decision) and some more methods

[–] AceSLS@ani.social 15 points 1 year ago (11 children)

AdBlock doesn't do shit about advanced fingerprinters

Have a look at CreepJS

Only way I found to circumnvent it is by using JShelter with WebWorkers removed

[–] AceSLS@ani.social 25 points 1 year ago

This is the same cat and mouse game hackers have been doing with game-/anticheat developers since multiplayer games became a thing

Are people still cheating? Yes

So unless google manages to pull of their device certification fuckery for PCs it will never work out in their favor

[–] AceSLS@ani.social 14 points 1 year ago

That's what Early Access is about, right? And it's not like other fuckers who release in EA and then just abandon ship after getting paid/releasing some minor patches for an unfinished game and call it "full release" (looking at The Forest for example)

[–] AceSLS@ani.social 3 points 1 year ago* (last edited 1 year ago)

For gaming PDS is king for stable frametimes and fast response times

Bore is close second

EEVDF is very good too

I also hope you're compiling with llvm and full lto for maximum snappiness

[–] AceSLS@ani.social 4 points 1 year ago

Sadge, you tried to improve Lemmy by posting something and got downvotes for your work

Don't let yourself feel down about this, you tried to do the right thing and it didn't work out. Try to understand why things happened the way they did and most importantly never stop trying what you think is right :)

Tbh I didn't read the article but I'm glad you posted it because every post on Lemmy contributes to it being "alive". So, thank you

[–] AceSLS@ani.social -1 points 1 year ago

Would have been easily avoided by using Lutris for your non steam games

[–] AceSLS@ani.social 4 points 1 year ago

Easiest way is to download all and let something like dupeGuru do the rest

Afaik google makes that extremely annoying and they strip your images metadata when getting them from takeout so keep that in mind

Also, for your own good create a backup before deduplicating, just in case you do something wrong (this also let's you experiment with your duplicate file finder of choice without having to be scared about fucking up)

[–] AceSLS@ani.social 10 points 1 year ago (5 children)

I don't think google can win this without serverely limiting access to Youtube

[–] AceSLS@ani.social 2 points 1 year ago

Doesn't even need updates, in the 10 years I was on Windows it didn't want to start after shutting it down again like 7 times

I hated having to reinstall every year

view more: ‹ prev next ›