Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)HO
Posts
70
Comments
270
Joined
1 mo. ago

  • Do you have a real need to prevent this data from being collected

    maybe

    or are you investigating just for best practice advice?

    yes

    There are a lot of posts like this where people overestimate the threat model they have and insist on needing to block things that are nearly impossible to, or at least have significant tradeoffs like you are dealing with now

    could you explain why it is nealy impossible from only blocking javascript from attaining "local machine operating system + version "? I don't think this kind of information is relevant for webpage displaying. I dont think webpage will break if we ban js from doing so

    I would assume you could technically fork localCDN (replaces remote javascript libraries with local copies) and then manually edit the local javascript library copies to remove the calls you are concerned about.

    that could work I guess when I have enough js knowledge

    There’s also options like uBlock Origin’s methods of only whitelisting specific scripts. Much more flexible than NoScript. You can block scripts that are third party and only allow site specific ones fairly easily, without digging deep into the settings.

    is it possible to adjust uBlock Origin whitelisting and disallow js that retrieve "local machine operating system + version " from running?

    Bear in mind that your specific combination of installed extensions can also be a unique identifier though.

    Does this mean website can see all the extensions I installed?

  • by sensitive information I'm referring to

    • local machine time
    • local machine ram
    • local machine operating system + version
    • local machine hardware
    • Serial Number
    • Hardware ID
    • UUID
    • Windows Device ID
    • Windows Product ID
    • ...

    Can I prevent javascript from running specific command that retrieve these information?

    I found chameleon which spoof local machine operating system + version and browser information. But I'm not sure about other information