31–40 of 67 posts
I'm usually completely against using "apps" for anything, but does using an app (on mobile) protect against this type of thing? Does an embedded web view have access to the things you're logged into in your main browser on your phone? So does using my credit union app to access my account protect me from them getting all this info from my phone browser?
Use Firefox Containers and live happy. https://testpilot.firefox.com/experiments/containers/
>> It's basic fingerprinting used by every major security-sensitive service, like banks.
>> The more entropy (unique bits of data) about your browser context they can collect, the easier to recognize you and see if you're a human or not (and block if they need to).
> you install on your own server Yes anyone can easily spin up their own server, but MailChimp does that part for you. Right? So the cost analysis should really include the cost of an EC2 instance too, to compare them fairly.
I would suggest the following when connecting to this site. 1. use a dedicated browser, and only use that browser for this site. 2. utilize private mode if you don't want to dedicate a browser only for this site 3. use different profiles in your normal daily browser. for example firefox, and chrome allows you to have multiple profiles. Create a new profile to use when going to this site. 4. analyze the javascript and…
I want every website I visit to act as if I have a dedicated computer just for browsing that one site, and have zero knowledge of anything else I do on the Internet or on my computer.
Criminals create fake accounts and use stolen credentials to defraud banks. The problem of stolen credentials is partly solved by 2FA, but banks have measured that 2FA annoys users and makes them less likely to complete transactions. As a middle ground between imposing 2FA on users and being defrauded frequently, banks buy browser fingerprinting services (e.g., ThreatMetrix, Trusteer, Kount, Iovation, Easy Solutions, ...). If the user's fingerprint matches their database and looks normal, they pass the login through (takes ~100ms, mostly invisible to user). If the user looks suspicious, they escalate to 2FA or some other login verification that criminals cannot pass.
Apps do the same thing. It's all to help gauge whether you're a legit human or a criminal bot.
Seconding other commenters, using a dedicated browser and/or a VPN can help hide your 'digital footprint'. For example, here's what I'm using. An easy way to set up a sandboxed Chrome using Docker! https://tpaschalis.github.io/sandboxed-browser-with-docker/
I would suggest the following when connecting to this site. 1. use a dedicated browser, and only use that browser for this site. 2. utilize private mode if you don't want to dedicate a browser only for this site 3. use different profiles in your normal daily browser. for example firefox, and chrome allows you to have multiple profiles. Create a new profile to use when going to this site. 4. analyze the javascript and…
You trust the credit union with your money, but don't trust them with a fingerprint of your browser identity?
Sounds like they copy pasted my demo into production: https://robinlinus.github.io/socialmedia-leak/
I am logged in to HN and it didn't catch that.
I would suggest the following when connecting to this site. 1. use a dedicated browser, and only use that browser for this site. 2. utilize private mode if you don't want to dedicate a browser only for this site 3. use different profiles in your normal daily browser. for example firefox, and chrome allows you to have multiple profiles. Create a new profile to use when going to this site. 4. analyze the javascript and…
Why isn't there a browser that provides a sandbox or container for every website I visit? I want cookies to persist between visits for obvious reasons, but I think its absurd that breadcrumbs are so easily reachable and used for building an advertising profile on me. I want every website I visit to act as if I have a dedicated computer just for browsing that one site, and have zero knowledge of anything else I do on…
https://medium.com/firefox-test-pilot/firefox-containers-are...