this post was submitted on 28 Aug 2024
2268 points (99.3% liked)

Technology

60070 readers
3684 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] MrPoopbutt@lemmy.world 37 points 3 months ago (2 children)

Don't all the advanced ways rely on JavaScript?

[–] hoot@lemmy.ca 62 points 3 months ago (4 children)

Lots do. But do you know anyone that turns JS off anymore? Platforms don't care if they miss the odd user for this - because almost no one will be missed.

[–] pixelscript@lemm.ee 30 points 3 months ago (4 children)

"Anymore"? I've never met a single soul who knows this is even possible. I myself don't even know how to do it if I wanted to.

I do use NoScript, which does this on a site-by-site basis, but even that is considered extremely niche. I've never met another NoScripter in the wild.

[–] deranger@sh.itjust.works 34 points 3 months ago

Why not just use ublock medium mode?

Roughly similar to using Adblock Plus with many filter lists + NoScript with 1st-party scripts/frames automatically trusted. Unlike NoScript however, you can easily point-and-click to block/allow scripts on a per-site basis.

https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium-mode

[–] zero_spelled_with_an_ecks@programming.dev 18 points 3 months ago (1 children)
[–] LunchMoneyThief@links.hackliberty.org 7 points 3 months ago (1 children)

They probably mean in the flesh.

I don't really talk about it in meat space, so they just might not have known.

[–] BalooWasWahoo@links.hackliberty.org 1 points 3 months ago (2 children)

The people who I've tried to get on NoScript seem to have the brain capacity of goldfish. If the site doesn't instantly work, it's as if the sky has fallen and there is no way to convince them to pay attention to which scripts are actually needed.

It's a rare breed that is willing to put up with toggling different scripts on and off. I'll also acknowledge that too many people (including me) are in a giant rush. For work-type stuff, I have the laptop without noscript, because sometimes I do need something to work absolutely right now.

[–] papabobolious@feddit.nu 6 points 3 months ago

You don't think you are being a tad judgemental?

People whose lives revolve around fashion probably think you dress like shit.

People who love food probably think you eat like shit.

People who love cars probably think you are a shit driver.

You probably love computers and care about privacy, and you are shitting on regular users(assumption, admittedly) for not being invested.

They had something that was working, you present noscript, thing no longer works. If you are not invested, how are you going to see the appeal of extra work?

[–] pixelscript@lemm.ee 3 points 3 months ago

Well, you know what they say. You can lead a horse to water, but you can't make it interested in learning about the water cycle to have a deeper understanding of why the river flows in the first place.

[–] Buddahriffic@lemmy.world 1 points 3 months ago

I like the grid add-on for Firefox. It disables 3rd party pretty much anything by default. And you can control cookies separately from everything else, and I can't remember any time I've needed to enable those cookies to get a site working properly (whereas sometimes you need to enable scripting, media, or iframe for cdn or something).

[–] undefined@links.hackliberty.org 10 points 3 months ago* (last edited 3 months ago) (1 children)

I go hard with DNS-based ad blocking and I’m constantly confirming it works by checking the network tab in developer tools. I’m basically only seeing first party scripts and CDN assets — 99% of websites load all the tracking garbage from third-party domains that can be easily blocked.

[–] MrPoopbutt@lemmy.world 4 points 3 months ago (1 children)
[–] undefined@links.hackliberty.org 1 points 3 months ago (1 children)

It’s a common solution but I do something more involved and manual, but it’s the same concept.

[–] MrPoopbutt@lemmy.world 2 points 3 months ago (1 children)

Is it something you can talk about? I'm currently in the process of trying to switch from pihole to pfblockerng but am interested if there are better alternatives

[–] undefined@links.hackliberty.org 1 points 3 months ago

At a high level it involves a terrible custom parser written in Ruby for several formats of DNS blocklists. It finds the proper domain then outputs a large configuration file for Unbound.

I’ve attempted to Dockerize it but honestly, I think it would be better to use a superior parser written in another language that can be statically compiled.

I was using Fly.io to host it in various regions using an Anycast IP, but since I’ve moved onto using VPN for everything I’ve moved it to a few hosts acting as Tailscale exit nodes. Those exit nodes provide the blocking DNS service along with rewriting incoming Tailscale client traffic to route out of another network interface assigned to a VPN provider.

Had I unlimited free time I’d rewrite the parser in Crystal, but part of me thinks there’s got to be something already written by someone in Go.

[–] MigratingtoLemmy@lemmy.world 4 points 3 months ago

uBlock origin + NoScript for me. I deal with the bigger umbrella of scripts with uBlock and then fine tune permissions to the ones that uBlock allowed with NoScript.

They might be fingerprinting me using these two extensions though.

[–] pmc@lemmy.blahaj.zone 2 points 3 months ago

I use LibreJS with few exceptions. If I need to use a site that requires non-free JavaScript, I'll use a private browsing window or (preferably) Tor Browser.

[–] Septimaeus@infosec.pub 9 points 3 months ago

Not all but most, yes. But TBF, sites that still function with JS disabled tend to have the least intrusive telemetry, and might pre-date big data altogether.

Regardless, unless the extent of a page’s analytics is a “you are the #th visitor” counter, all countermeasures must remain active.