- A reputable anonymizing VPN service
- Linux
- Firefox (or compatible) web browser
- HTTPS-Only Mode
- Noscript
- User-Agent Switcher
These are some easy things that will keep you safe in the age where you shouldn't trust *anything* your device connects to online.
@simondueckert Die Artikelserie von @kuketzblog half mir.
https://www.kuketz-blog.de/librewolf-datensendeverhalten-desktop-version-browser-check-teil8/
Ggf. auch: https://www.kuketz-blog.de/browser-welche-ich-aktuell-auf-dem-desktop-nutze/
Es wurde #LibreWolf. Mobil #Vanadium auf #GrapheneOS.
Ist auch vermutlich eine gute Wahl aus #privacy & #security-Perspektive.
Allerdings gibt's bei LibreWolf das Problem, dass fast alle Zeitangaben nur noch in #UTC dargestellt werden. Besonders lästig bei Chats, Version Control Systems, Kalender, ... im Browser. Könnte man auch disablen aber offenbar nur als größeres Paket von an sich sinnvollen Anti-Tracking-Maßnahmen.
Diverse Workarounds haben bei mir bislang nicht funktioniert.
Meine Lösung aktuell: für diese Seiten, wo mir Zeitangaben wichtig sind, habe ich #Firefox (mit diversen Privacy-add-ons).
Das Wichtigste ist ohnehin in jedem #Browser #NoScript.
HTH
Yeah, I used to use #NoScript like @sotolf does, but with some sites like banking and "professional" websites, it's a trip and half to get the site to work at all, then to work in non-Chrome browsers, then to work with uBo/PrivacyBadger/CanvasBlocker, then adding NoScript to all of that jazz would really send me loopy. XD
But I think it's totally valid to have a "general browsing" browser that's locked down like Fort Knox, and then a very vanilla one for "don't break on me, cheems!" work sites.
I dunno. :P
How many Engineers are needed to change a lightbulb? Or: how many web servers are needed to serve a mostly static page?
$ pip3 search something
...
RuntimeError: PyPI no longer supports 'pip search' [...]. Please use https://pypi.org/search (via a browser) instead. [...]
Sure, no problem. Let's see …
»JavaScript is disabled in your browser. Please enable JavaScript to proceed.«
Urgh, but okay, #pip is a #Python package manager, they're good guys. Let me just open #NoScript and temporarily allow pypi.org ... oh no, it wants to run #JavaScript from …
ethicalads.io
fastly-insights.com
googletagmanager.com
gstatic.com
statuspage.io
That's what you get after 30 years of using the term #OpenSource instead of #FreeSoftware.
Sometimes I'll abandon looking at a website due to the annoyingly large amount of domains that I'm required to unblock in NoScript to simply view the content.
@Jessicascott09
There IS a way to opt out of #TikTok, all of #META an #Twi-X.
All of them are blocked in my LAN (I have no account with any of them nor has anybody here).
Plus you can do it on an individual base by means of JS blocker such as #NoScript or #uBlock Origin.
Additionally you are right in demanding legal regulation against ALL #tracking methods. Just dreaming.
You know how #RichardStallman #GNU laments #javascript but also how nothing works without it? https://www.gnu.org/philosophy/javascript-trap.html
Alright, so say you torsocks lynx ( #KU ) #ProjectGutenberg. Alternately, you could use highest security #TorBrowser with #noscript. But have you tried #Vanguards #Whonix GW with #vlc ? There is a lot that can be done with vlc for media that wouldn't work in a tor browser (netscape-plus) with vanguards. You would think that there is more anonymity because more people use the more popular #browser / #terminal -plus method but there are trade-offs with functionality and less data leaking. Is less data leaking a form of fingerprint? @mokancan
#Forensics #JavaScript #Anonimity #FreeSpeech #FreedomOfInformation #censorship #Fingerprinting
This video sums up your frustration quite nicely @paddyduke;
https://peertube.nz/w/ocxpCzSfdLTVDZ2aVdo47v
I highly recommend the #NoScript add-on. Not only does it filter out a lot of this garbage, which depends on running JavaScript from third-party domains, it allows stops a lot of tracking that goes on in the background.
Before I discovered NS, my laptops used to routinely crash. Brought down by the ludicrous amount of memory used, by all the JS running in the browser tabs I had open.
@mattmarcha
> Thank you for this.
Welcome 
> You're a nice reminder to regularly turn off js and see how things are going
I highly recommend the #NoScript plugin. It can selectively allow domains to run JS. So it's possible to get a site working without unleashing the full JS avalanche.
Browsers used to routinely crash my laptops. I thought it was hardware or OS problems. Once I installed NS, the problem went away. That's how catastrophic the JS avalanche can be on older devices.
So here you go: a responsive, bilingual, RSS-ready and system-color-theme-adapted blog with zero lines of JavaScript.
Props to https://getzola.org for the fantastic static site engine behind it.
For anyone curious about the source code, it's here: https://github.com/jultty/blog
PressReader.com is classic enshittification. For a start, check out the screenshot from the NoScript add-on, showing all the spyware PressReader.com infects the web browsers of visitors with.
Then there's the way it prevents me from cut'n'pasting quotes from the text. Violating my Fair Use rights, which are protected by copyright law.
On a whim I set up #NoScript and it's odd how many websites already don't show images. It looks like it's trying to lazy-load the images, which for some reason they're requiring JavaScript to do... why not use the element, and the tag's built-in lazy loading?!
Yearly (renewal triggered) reminder that https://noscript.it exists and that everyone who isn't making a web application should make sure their website degrades gracefully without JavaScript because that leads to a better experience for all.
For a better explanation as of why, see this presentation by @sil
https://youtu.be/e1L2WgXu2JY
@xro At least on the web, #malware gets distributed via the #advertisement propagation channels.
Therefore, an #adblocker + #NoScript add-on are mostly not for personal convenience but rather an important security feature.
As a side-effect, the web is faster and easier to consume without ads.
@zeborah
> It's getting worse all the time too. A few days ago it started loading a Google login option
One of the fascinating things about running #NoScript in all my browsers is that I can see at a glance which third-party domains a website is loading scripts from, to run in my browser. I've been doing this for at least 7 years now, and what I see when browsing NZ news sites is often horrifying.
I suspect web workers cut corners with copypasta scripts they don't read.
