Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)FU
Posts
5
Comments
212
Joined
1 yr. ago

  • A lot of the Javascript attributes used for fingerprinting are used to decide WHAT to render and to cache settings so things work smoothly the next time you come back.

    For example, the amount of RAM, your WebGL settings and version, presence of audio, mic, and camera, and screen dimensions are all relevant to a game, a browser-based video-conferencing app, or WebASM based tools like Figma.

    And unless you want an app to do a full check each time it returns to foreground, it will likely cache those settings in a local store so it can quickly look it up.

    If the app needs to send some of this data to the cloud so the server changes what it sends up, they now also have your IP address, rough reverse IP coordinates via ISP, and time. You can use VPN or Tor to obfuscate IP addresses, but you have to remember to turn that on each time you use the app, and in the case of VPN, to disconnect/reconnect to a random server to semi-randomize your IP (or use Tor, which does this for you).

    But to answer the first question, changing or disabling those settings could break a bunch of features, especially Single-Page Applications, those using embedded analytics, or any amount of on-device graphics.

  • Batteries shouldn't go into garbage because they can and will leak or explode. We have a regular recycling service around here, but they don't take many kinds of batteries (including lithium ones).

    There's a county "hazardous waste" service that takes things like paint and old fuel for generators. They take some things but not others. There's also a separate "e-waste" service. Last time I had a few things to drop off, I had to call to find which ones would take a specific type of battery.

    I've got the same Anker recall. Will be calling around next week to find which place will take them.

  • They were doing this a decade ago, to help track app marketing campaigns.

    IIRC, it turned out you could get pretty close to uniquely identifying a device with permutations on only 7 attributes. The problem is if you install a plugin to return false data, it could break non-malicious websites, like running games or data visualizations.

  • Years ago, folks hacked a Jeep Wrangler remotely, with a WIRED reporter in the car: https://www.wired.com/2015/07/hackers-remotely-kill-jeep-highway/

    That freaked the shit out of vehicle manufacturers. It led to encrypted CANBus messages: https://dev.to/living_syn/can-bus-message-security-3h43

    Problem was, your mom and pop repair shop would need a special $$$ 'authorized' dongle from the manufacturer to be able to diagnose problems beyond what plain OBD-II let you see. This effectively locked out third-party repair shops. People screamed and IIRC, a lot of car manufacturers backed down and just hardened remote access.

    What Deere did was even more harsh. They tried to block off not only self repair, but third-party firmware that made the tractors work better, especially older ones that were out of warranty: https://schiller-tuning.com/vehicle-listings/agriculture/john-deere

    They're trying to game copyright laws and click-through terms-of-service agreements to lock out third party repair.

    This is a test case. If they lose, it'll be a BIG win for Right to Repair laws, covering phones, laptops, consoles, etc.