• nixukty@lemmy.zip
    link
    fedilink
    arrow-up
    15
    ·
    4 hours ago

    Vibe coded af, how has nobody spotted this. The website swears the text was written by a human, and either they have contracted chronic GPT-virus or are an LLM

    edit: this is made by Rise Up Labs which is an ai psychosis company

    • iglou@programming.dev
      link
      fedilink
      arrow-up
      1
      ·
      20 minutes ago

      And then you become even more identifiable cause you’re part of the 10 madmen in Google’s database who do it

  • plz1@lemmy.world
    link
    fedilink
    English
    arrow-up
    15
    ·
    4 hours ago

    “We know your IP address”. No kidding, that’s how IPv4 works, even if the browser wasn’t leaking offering it.

    • iglou@programming.dev
      link
      fedilink
      arrow-up
      1
      ·
      21 minutes ago

      The point is not that they know your IP, but that even your IP already gives away information. That’s why they start with the information, rather than the IP being the source.

      This is not intended to be for people who understand how this works.

      And as someone else said, probably vibe coded.

  • Zacryon@feddit.org
    link
    fedilink
    arrow-up
    9
    ·
    6 hours ago

    Well then I am glad that it got most of it wrong. I don’t even put thaat much emphasis on fingerprinting countermeasures. Apparently, using Firefox in a private tab is enough.

  • DornerStan@lemmygrad.ml
    link
    fedilink
    arrow-up
    4
    ·
    6 hours ago

    It’s been a few years since I was invested in this topic, but I think the “meta” for reconciling the tension between blocking tracking and unique fingerprinting was to, in some cases, spoof information rather than outright block it.

    Tor browser does that by default, though a few years ago when I tried to use it as a daily driver it was too tedious thanks to cloudflare.

    Most of my research regarding browsers was focused on computers. Now that Firefox mobile can run extensions some of this might be mitigated that way.

    Blocking JavaScript unfortunately makes you super unique but the tradeoff is probably worth it imo. I don’t want every random site I visit to immediately run a bunch of code, especially third party nonsense. Even if it makes my traffic stand out.

    For most threat models I suspect unrestricted JavaScript is more dangerous than the potential for fingerprint-based tracking. Or at least JavaScript is very likely to leak multiple unique data points, whereas a “blocks JavaScript flag” is just a single unique identifier.

    Sandboxing and siloing can also mitigate some of the risk, and is relatively painless once implemented.

    All of it comes down to threat model and motivation. You can probably get like 70% better privacy/security for 20% of the work, which is a good standard for a typical usecase/person. Install ublock, disable some of the higher risk and less useful tracking (websites don’t need my fucking battery and gyroscope).

    Diminishing returns start to hit hard, in part due to the passive fingerprinting / active tracking tension, due to cloudflare, due to everyone around you that doesn’t give a shit. Anything on the other end of the risk spectrum should just be done without a smartphone in the vicinity, if possible.

  • RememberTheApollo_@lemmy.world
    link
    fedilink
    arrow-up
    6
    arrow-down
    2
    ·
    7 hours ago

    I’m honestly not impressed. Basic IP address that didn’t really provide an accurate location, plus the (no shit sherlock) state and country it was in. Told me it was ios, a browser, and that I’d turned a bunch of stuff off.

    That’s it.

    • Zach777@lemmy.ml
      link
      fedilink
      arrow-up
      14
      ·
      9 hours ago

      Unironically a solid way to block a lot of tracking. Although they can still fingerprint you I think.

      • Brimstone@lemmy.ml
        link
        fedilink
        arrow-up
        26
        ·
        9 hours ago

        Nothing makes you more unique than being one of the few people who disable java script

    • floquant@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      8
      ·
      9 hours ago

      Only a handful of data points surfaces by this website come from JS APIs, most are either header-based or some other browser behaviour that is independent from JS

  • eureka@aussie.zone
    link
    fedilink
    English
    arrow-up
    15
    ·
    10 hours ago

    I’m glad it acknowledges explains the impacts of anti-fingerprinting measures. I’ve seen some others assume that a random canvas is unique rather than one of the many people randomising it the same way, leading to a false “unique” assessment.

    Your browser appears to be returning the viewport in place of the real screen — anti-fingerprinting at work. The substitution is itself distinctive.

    Your browser masked your graphics processor. Firefox and Safari have started returning generic strings — “Mozilla”, “Apple”, “or similar” — instead of the real renderer. The fact that yours did so tells us, with reasonable confidence, which browser you are running. The mask is also a fingerprint.

    • Buddahriffic@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      9 hours ago

      I like that they covered all the possibilities for the do not track flag, as I saw it as useless from the very start, as by then I realized the honour system didn’t mean shit and it would just be another piece of data.