[–] 1 point 8 months ago (4 children)

Causation:

  1. FaceBook website has apps
  2. FaceBook website is an App store
  3. FaceBook website requires access to Age API
  4. Firefox needs to passthrough Age API to Facebook's domain
  5. All embedded FaceBook buttons now get to see your OS's age
  • source
  • parent
  • context
  • [–] 1 point 8 months ago* (8 children)

    The application of age indication is just going to be another metric that these companies use for fingerprinting and person identification, one that some analyst on their inside possibly considered a useful data point.

    And while this particular API might be an easy one to target, for removal as a patch, it might end up being part of a JS framework that many websites use and will break in case the return value is not available.

    So if people require sites to work, this will become just another feature, requiring similar mitigations to other JS features I mentioned, that will need to be handled in a way that it increases the anonymity of the user, lest the user be subjected to harassment.


    By "harassment", I mean the actual inescapable kind, not just random internet trolls.

  • source
  • parent
  • context
  • [–] 0 points 8 months ago

    in-Steam NFTs on external platforms would help

    I am not saying "it would help" anyone that is getting scammed.
    All I am saying is that if Valve is talking about consumer rights, it's not actually giving them that.

    Banks try to help prevent you from getting scammed (at least here they do), but you still hold the final say if you really want to pay the scammer. You can just withdraw cash and hand it over to them. That is what the right to transfer means.

    I am not at all talking about Valve's supposed duty to protect people from being scammed, because my point is that them giving the user the "right to transfer" means that Valve should not even be in a position to stop a scam from happening. In that case, all they would be able to do is suggest guidelines to users one how to prevent themselves from getting scammed and it is the users' decision whether they care to read it or not.

  • source
  • parent
  • context
  • [–] 1 point 8 months ago (10 children)

    Hi, I am here to tell you that it is not particularly trivial to make the kind of changes required to make the websites keep working while also preventing stuff similar to JS fingerprinting.
    Some extensions do a decent job in certain cases, but the only ones that completely fix the problem are the ones that simply turn off JS. I checked out what Librewolf's changes do, using amiunique.org and in some tests it even ends up increasing the uniqueness.


    You will essentially require identifying different parts of the JS engine that expose said vulnerabilities and then creating mitigations for each of them, with either the "blend in" or "randomise" strategy and will also require to make sure they are not detected over any domain (due to partial overlap of either change).

    This kind of change for a single person will require properly understanding the JS engine codebase and then making and maintaining all required patches over the course of the fork as the main project goes forward. This is pretty much a full time job.
    Even if multiple people are working on it, one would still require a good understanding of the codebase.

    I suggest recruiting one of the retired/laid-off Firefox engineers, if you have the funds.

  • source
  • parent
  • context
  • [–] 1 point 8 months ago

    Now that makes me think.

    • Could this be one of those kinds of ceremonies where multiple people drink from the cup while blessing the host of the ceremony (birthdays and such)?
      • Kind of like the modern "cheers" chant.
    • Or could it be intended to say, "bless the one drinking out of the cup"?
  • source
  • [–] 0 points 8 months ago* (2 children)

    Now that I read it after having eaten some food, I actually managed to get the picture.
    Of both, the previous - valve leaving the bottle - and the - projectile into the bilge.

    Okay, I had to look up "bilge" for that.

    Although I don't remember there being threads to hold down a valve wherever I saw them, I'd rather not have to visit a ship again, just to make sure.

  • source
  • parent
  • context
  • view more: ‹ prev next ›