this post was submitted on 05 Sep 2026
23 points (100.0% liked)

No Stupid Questions

49701 readers
668 users here now

No such thing. Ask away!

!nostupidquestions is a community dedicated to being helpful and answering each others' questions on various topics.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules (interactive)


Rule 1- All posts must be legitimate questions. All post titles must include a question.

All posts must be legitimate questions, and all post titles must include a question. Questions that are joke or trolling questions, memes, song lyrics as title, etc. are not allowed here. See Rule 6 for all exceptions.



Rule 2- Your question subject cannot be illegal or NSFW material.

Your question subject cannot be illegal or NSFW material. You will be warned first, banned second.



Rule 3- Do not seek mental, medical and professional help here.

Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.



Rule 4- No self promotion or upvote-farming of any kind.

That's it.



Rule 5- No baiting or sealioning or promoting an agenda.

Questions which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.



Rule 6- Regarding META posts and joke questions.

Provided it is about the community itself, you may post non-question posts using the [META] tag on your post title.

On fridays, you are allowed to post meme and troll questions, on the condition that it's in text format only, and conforms with our other rules. These posts MUST include the [NSQ Friday] tag in their title.

If you post a serious question on friday and are looking only for legitimate answers, then please include the [Serious] tag on your post. Irrelevant replies will then be removed by moderators.



Rule 7- You can't intentionally annoy, mock, or harass other members.

If you intentionally annoy, mock, harass, or discriminate against any individual member, you will be removed.

Likewise, if you are a member, sympathiser or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people, and you were provably vocal about your hate, then you will be banned on sight.



Rule 8- All comments should try to stay relevant to their parent content.



Rule 9- Reposts from other platforms are not allowed.

Let everyone have their own content.



Rule 10- Majority of bots aren't allowed to participate here. This includes using AI responses and summaries.



Credits

Our breathtaking icon was bestowed upon us by @Cevilia!

The greatest banner of all time: by @TheOneWithTheHair!

founded 3 years ago
MODERATORS
 

Hello everyone! I saw that disabling JavaScript was good to prevent fingerprinting. However, something's holding me up from doing so: since only a minority of the Internet users block it, won't it make me more easy to identify?

Even if it's harder to load trackers or fingerprinting scripts, what if one manage to load? Will the fact that I disabled JavaScript make me more "unique" ?

Thanks in advance for any help!

top 19 comments
sorted by: hot top controversial new old
[–] MonkderVierte@lemmy.zip 1 points 1 hour ago

No, because they don't know it's you but only public IP soundso.

[–] Onomatopoeia@lemmy.cafe 5 points 2 hours ago (1 children)

Blocking JS will increase fingerprint accuracy, but...

I can't imagine browsing with all js allowed by default anymore. It's painful.

With NoScript and Ublock my browsing experience is just so much better - stupid videos don't autoplay, the screen doesn't do weird reflow once it fully loads, etc.

[–] Buage_@piefed.social 1 points 2 hours ago (1 children)

That looks much better. I already use uBlock Origin, but now I will disable JS by default too ig!

[–] limerod@reddthat.com 1 points 1 hour ago

Since you mentioned Ublock-Origin. I would recommend to disable 3rd party Iframes. That will mean tweets, youtube videos will not play by default but you can manually whitelist them at global or site local way if desired. Not loading Iframes by default should reduce the amount of trackers and potential malware that could be loaded from compromised sites.

You can see what level of blocking you can use according to your convenience here: https://github.com/gorhill/uBlock/wiki/Blocking-mode

[–] bjornsno@programming.dev 20 points 4 hours ago (2 children)

I mean. Yeah, technically, but go on and try it. Most of the web won't work for you anymore. And you'll still be tracked by pixels. You can pair the disablement with a tracker blocker to get those, but then a good blocker also handles fingerprinting scripts, so then what was the point?

[–] Buage_@piefed.social 1 points 2 hours ago

I think that disabling JS is worth the price (imo), that doesn't annoy me very much Also, I believe tracker blockers can sometime fail to block fingerprinting scripts cause they're could come from unknown domain

[–] Pomal@sh.itjust.works 2 points 4 hours ago (1 children)

It’s a technical arms race and good hygiene to review code from untrusted third-parties.

[–] ten8tp@reddthat.com 6 points 4 hours ago (2 children)

Can't review code if you don't know how to. Are we meant to throw the source into AI and go, "hey is this safe"? While it may work, the time and effort sometimes isn't. It's literally being stuck between a rock and a hard place, so-to-speak. And before anyone says, "well, you should learn code", I hear you. All due respect to those that can, I'm not taking the time because I don't have time. I'm surviving from high gas prices, high grocery prices, higher bills (with for-profit companies reporting their best ever profits YOY), and keeping afloat. "Ain't nobody got time fo dat."

[–] masterspace@lemmy.ca 1 points 33 minutes ago* (last edited 31 minutes ago)

Yeah, people don't seem to realize that their technical solutions don't matter.

Tracking and privacy is a problem that can only be solved through legislation and legal means. Big companies have more resources and can work around any technical hurdle you throw up.

Like they don't even have to work around them technically... Oh you like the encrypted messenger? It would be a shame if they were able to make it useless by convincing everyone to just use their DM system leaving no one on your encrypted messaging network to talk to, wouldn't it?

[–] bjornsno@programming.dev 7 points 2 hours ago

Anyone who knows the first thing about web dev knows this is pointless. The scripts are minified and mangled so far it's impossible to suss out what they do without hours and hours of deobfuscation per script, and it can often be hundreds of scripts. The only thing you can do is use blockers. They don't try to understand what the script does, they operate by blocking known stuff and known bad origins.

[–] Pomal@sh.itjust.works 10 points 4 hours ago (1 children)

This is Information Theory at work. You’re compacting (n+1) signals, where n is any number between 1 and infinity, to 1. With javascript execution, anyone can get timing, webgl, location, device hardware access, etc.. Without it, they just get a single bit that tells them to fuck off.

[–] Buage_@piefed.social 1 points 2 hours ago

Good point!

[–] A_norny_mousse@piefed.zip 10 points 5 hours ago* (last edited 4 hours ago) (2 children)

I don't have an answer to your question but I tend to agree with what you wrote.

However - is fingerprinting the only thing to worry about on the www? I'd say not.

Disabling javascript by default is a good way to be able to click links without running the risk of getting pwned by some rogue script.

Then I use an addon that shows me all the 3rd party shit the site would've wanted to load, and if it looks OK to me I then enable javascript. The addon can remember this if I want to, so I don't have to do it every time for that particular site.

Esp. with news articles js is often not even required to read the article itself. Or I can see content that becomes invisible when js is enabled.

FWIW, the developers of Tor browser are experts in being anonymous online, and they disable js by default. While it might make me more unique, js has enormous capabilities in collecting all sorts of data from my machine, and - I guess - that's why disabling it makes me more anonymous in the end. Just a hunch.

[–] onipa@feddit.org 6 points 3 hours ago

I also block js and for most pages I only enable the scripts which are needed. After a few pages you will get feel.
It feels nice that I don’t need to enable a random script from oneClickTrackYouAndSellYourData.com and enable only the scripts needed for functionality.

[–] Buage_@piefed.social 1 points 2 hours ago

I guess I will disable it too!

[–] Zedd_Prophecy@lemmy.world 3 points 3 hours ago (2 children)

Why not use a security based OS on a thumb drive and boot into it for surfing privately. There was one I played with a while ago but forgot the name.

[–] Semester3383@lemmy.world 2 points 2 hours ago (1 children)
[–] Zedd_Prophecy@lemmy.world 1 points 2 hours ago

Thank you, it was tails.

[–] Buage_@piefed.social 1 points 2 hours ago

I sometimes use Tails, but the fact that it wipes every files on shutdown is kinda annoying imo