241–250 of 281 posts
Earlier quoted context omitted.
noscript is sadly, not perfect, but works if you stay 1st party. A great way to make your browsing better is to disable 3rd party scripts by default and whitelist when needed, but fails to work in those conditions.
You're thinking about Noscript the plugin. is also an HTML tag that can contain content for use when the browser isn't running JS, but which would yield a cleaner page if not present when JS is running.
Earlier quoted context omitted.
As someone who has JS off by default (via uMatrix) I see a blank page.
You need something to enable the ` ` content to be rendered, like a uBO dynamic rule `no-scripting: $hostname true`. uM doesn't do that.
Earlier quoted context omitted.
> If you're worried about viruses [...] Not to mention that a host of vulnerabilities were image related a few years back (one of the original rookits exploited a TGA bug). > uBlock Origin Honestly, this is the antivirus of the web. I helped my niece set up my old computer for Minecraft today, and she was explaining how her friend had installed viruses (adware, really) 3 times. Every one of those instances was caused…
In my experience Brave Browser (chrome based) runs circles around uBlock origin FYI
Earlier quoted context omitted.
Or maybe I need to try uBlock again rather than assuming my Pihole is as good as it gets. Thanks for the suggestion.
Of course it isn't. Pihole and similar DNS-based blockers do nothing for those kinds of spam which require performing DOM manipulations to be removed. Check uBlock settings after installing it. It has a separate "annoyances" list. I enabled everything in it a few years ago and never had a single problem. It removes all the GDPR banners, "please give us your email" popups, useless "oh I am so original" plates in forum…
But I must say I hate GDPR banners and this could convert me.
As someone who has JS off by default for a long time (ever since I discovered how much it could remove annoyances, and this was back when SPAs were basically nonexistent) and is thus often subjected to "Please enable JS" messages which more likely than not will simply make me click the back button[1], I am delighted to see this exists --- I've thought of the idea before, but never did anything with it: https://news.y…
>make me click the back button I forget about the back button. By default, I always open links in new tabs which means back button has no data. Also, SPAs have hijacked the back button or just broken it completely, so I've been trained to not count on it behaving as expected. There's also mobile experience where getting to the back button itself is often painful after the UI hides navigation from you. Otherwise, I am…
Earlier quoted context omitted.
> If you're worried about viruses [...] Not to mention that a host of vulnerabilities were image related a few years back (one of the original rookits exploited a TGA bug). > uBlock Origin Honestly, this is the antivirus of the web. I helped my niece set up my old computer for Minecraft today, and she was explaining how her friend had installed viruses (adware, really) 3 times. Every one of those instances was caused…
> one of the original root kits exploited a TGA bug As a lover of old image formats and the security issues they can cause* this sounds fascinating, but some quick google searches don’t seem to surface what you are referencing. Can you share any more details? * I once fell into discovering a memory disclosure flaw with Firefox and XBM images
Earlier quoted context omitted.
Or maybe I need to try uBlock again rather than assuming my Pihole is as good as it gets. Thanks for the suggestion.
Of course it isn't. Pihole and similar DNS-based blockers do nothing for those kinds of spam which require performing DOM manipulations to be removed. Check uBlock settings after installing it. It has a separate "annoyances" list. I enabled everything in it a few years ago and never had a single problem. It removes all the GDPR banners, "please give us your email" popups, useless "oh I am so original" plates in forum…
Earlier quoted context omitted.
On a great many web sites I have to spend the first 60 seconds on the site clicking on "X" boxes in popups to make them go away. In many cases there are actually several layers of popups obscuring the content, and some are delayed so they only pop up after you start reading the content. No I do not want to subscribe to your mailing list. No I don't want to take your survey. No I do not want to "chat" with your bot-pr…
I just hit reader mode on FF. I didn't know modern sites would even load without JS enabled.
I’d love to get rid of JS for my personal sites, but I know of no clean and simple way to render dynamic content otherwise. Server-side rendering seems a bit messy. I want a clean REST API separate from the UI. How can I generate pages with dynamic content easily? Ideally with absolute minimal dependencies.
Depends on what you mean by "dynamic". Some "do something when the user clicks"-style things can be done with CSS. The best example I know of that is https://git-send-email.io/
Earlier quoted context omitted.
> most people don't run their own resolvers, so at best you're fingerprinting DNS server of the ISP. That’s not how it’s tracked commonly. Similar to HTTP caches, you can fingerprint visitors by how quickly a domain request resolves for them. Sure, all of this can be mitigated. But you have to even know what to mitigate. And given the most fanatical privacy folks aren’t aware of basic timing fingerprints is a good in…
If js were removed from the web tomorrow, the people currently working on tracking protection against js could instead focus on these other mechanisms. Because privacy is an arms race, reducing attack surface is not pointless even if the same tracking can be achieved by other means.