0 points

@misk I think your federation software is broken. In Mastodon, the urls in your posts just lead back to themselves every time, not out to an external article.

permalink
report
reply

@mighty_orbot@retro.pizza @misk@sopuli.xyz same thing happens for me, i use sharkey on my instance (misskey fork) and i have to go to that linked post and click the link there to access it

permalink
report
parent
reply
42 points

Sir, this is a Lemmy’s.

permalink
report
parent
reply
5 points

I loled

permalink
report
parent
reply
3 points

It’s all Fediverse. You can follow things on lemmy on mastodon and vice versa and so on.

permalink
report
parent
reply
5 points

I’m aware but the degree of compatibility differs. Lemmy to Mastodon is pretty smooth but subOP is using some different microblogging platform it seems.

permalink
report
parent
reply
1 point

Mbin will now load pictures within the comment?!

permalink
report
parent
reply
3 points

I’m not sure if you’ll get this reply @mighty_orbot@retro.pizza, but here’s the link visible from Lemmy itself: https://tuta.com/blog/digital-fingerprinting-worse-than-cookies.

Your method of accessing this Lemmy community seems not to be working on your side somehow. You might try a different app - I’ve never used Mastodon so I don’t know what might work.

permalink
report
parent
reply
0 points

@OpenStars That was my point. I can open the post on its own server and see it as intended. But the federation part of the Lemmy (?) software is clearly not generating the right data.

permalink
report
parent
reply
3 points

@mighty_orbot@retro.pizza

What I mean is, the link in a Lemmy community when viewed from a Lemmy instance works just fine. So it’s not broken at that level.

I can’t speak to how it comes across to Mastodon, or your particular method of access to that, as you showed in your screenshot. In general, instances running the Mbin software seem to work better to access both Lemmy and Mastodon, but overall communication between Mastodon and Lemmy seems not perfect, as you said.

permalink
report
parent
reply
1 point

What is it like, reading Lemmy on Mastodon? Is it like one post with many replies? Or do they nest like in Lemmy?

permalink
report
parent
reply
5 points

@mighty_orbot @misk I’m using Friendica. From here, the links are normal. As it’s also not Lemmy, I guess it’s a Mastodon-specific (or even instance-specific) problem.

permalink
report
parent
reply
62 points
*

Just in time for their prophet, Curtis Yarvin, to be pushing a full-scale surveillance state!

Googlers aren’t on our side. They want to rule. They think being a fucking admin on a server makes them cut out to run society.

They want to tear down democracy and basically replace it with administrator rules and access control lists.

permalink
report
reply
5 points
*

Googlers aren’t on our side

They never were, out interests just aligned while they were growing market share. They have that now, so there’s no more reason to stay aligned.

Corporations aren’t your friend, but they can be momentary allies. People should’ve bailed once IE was dethroned, but here we are…

permalink
report
parent
reply
74 points

Would it be possible for a browser or extension to just provide false metadata in order to subvert this type of fingerprinting?

permalink
report
reply
61 points
*

So from what I understand, theres 2 common ways that browsers combat this. Someone add to or correct me if I’m wrong.

  1. Browsers such as Mull combat this by looking the same as every other browser. If you all look the same, it’s hard to tell you apart. I believe this is why people recommend using default window size when using Tor.

Ex: Everyone wearing black pants and hoodies with the facemasks. Extremely hard to tell who is who.

  1. Browsers such as Brave randomize metadata that fingerprinting collects so that it’s more difficult to piece it all together and build a trend/profile on someone.

Ex: look like a dog in one place, a cat in another place. They get data for a dog but that doesn’t help build anything if the rest of the data is a cat, hamster, whatever. No way to piece it together to be useful.

In both my examples, there are caveats. Just because everyone dressed the same doesn’t mean someone isn’t taller or shorter, or skinnier or fatter. There can still be tells to help narrow down. Or a cat that barks like a dog suddenly is more linkable to a dog if that makes sense lol.

In other words it still depends user behavior that can contribute to the effectiveness of these tools.

EDIT: got distracted. To answer your question I don’t think so. I think it’s more about user behavior blending in or being randomized. I think the only thing an extension would be able to do is possibly randomize the data but I’m unsure of such an extension yet. These aren’t the only options, these are just ones I’ve read about recently. Online behavior, browswr window size, and I’m sure so much more also goes into it. But every little bit helps and is better than nothing.

EDIT2: Added examples for each for clarity.

permalink
report
parent
reply
12 points

Mull is discontinued unfortunately, although I think it got forked?

permalink
report
parent
reply
16 points

Fennec is similar and is maintained

There is a fork of mull too

permalink
report
parent
reply
5 points

Yeah maybe Tor Browser was the better example. Just trying to get the point out lol.

permalink
report
parent
reply
7 points
*

For mobile, yes, development stopped.

However, Mullvad (from the actual VPN folk) for desktop still exists.

https://mullvad.net/en/browser

permalink
report
parent
reply
3 points

Yep. It’s fork is called ironfox

permalink
report
parent
reply
5 points

The first point is flawed and even TOR doesn’t execute javascript because it’s impossible to catch everything when you give the server full code running capabilities.

The second point is more plausible but there’s an incredible amount of work to do to fix this. Like, needing to rework browser engines from ground up and removing all of the legacy cruft. Brave is not capable of this and never will be no matter what they advertise because it doesn’t have it’s own engine.

That being said, these tools will get you quite far against commercial fingerprint products especially ones used for Ads but that will also ruin your browser experience as now you’re just solving captchas everywhere 🫠

permalink
report
parent
reply
1 point

Thanks for adding! Could you clarify a bit on the points so I can better understand where I was wrong at?

permalink
report
parent
reply
3 points

Yes but that metadata is also used to serve you the webpage, so if you spoof it, the page may not load properly.

permalink
report
parent
reply
8 points

Yes. There is a firefox extension called Chameleon that does this.

permalink
report
parent
reply
2 points

Others have mentioned what Firefox/etc do, but another option is a PiHole. If you can’t look up the IP for an advertiser URL, you don’t load the JavaScript to begin with.

permalink
report
parent
reply
10 points

No. Anything that executes Javascript will be fingerprinted.

That being said it depends who are you fighting. For common commercial tools like Cloudflare fingerprinter it might work to some extent but if you want to safeguard against more sophisticated fingerprinting then TOR and no JS is the only way to combat this.

The issue is that browsers are so incredibly complex that it’s impossible to patch everything and you’ll just end up getting infinite captchas and break your browsing experience.

permalink
report
parent
reply
0 points

And yet the normie still has nothing to hide…

Adult People accepting these material conditions disgust me.

But as society we got what we deserve, get fucked by daddy and asking for seconds because convenience and you can’t expect a peasant to have any agency

permalink
report
reply
2 points

Not sure why youre being downvoted your not wrong. The peasants need to sack up and help dismantle this shit

permalink
report
parent
reply
2 points

These statements appear to be insulting to them?

However, clearly politely explaining shit to them doesn’t work so I am just shit posting until I am dead or we hit critical mass of freedom enjoyers which ever one comes first.

permalink
report
parent
reply
9 points

Great read from Tuta on thia topic. It’s been an issue for a while but Google going full force publicly on it causes this issue to grow greater.

I left a comment replying to someone further down about how this can be at least a little combatted and how it is with browsers. (At least to my minimal knowledge of it)

permalink
report
reply
8 points

I just wish Tuta put more effort into their product than their marketing.

I noped out because of them not letting me have any control over my emails outside of asking them for a dump. But reading the support reddit is just brutal.

permalink
report
parent
reply
8 points

I personally have never used them. I use Proton myself (despite some news) and haven’t had any issues. I’ve heard Tuta is also great but I think one of the cons of privacy mail is that they’re not going to be nearly as polished as the big players like Gmail or outlook.

permalink
report
parent
reply
2 points

Do you have a link for those reviews of Tuta email?

permalink
report
parent
reply

Technology

!technology@lemmy.world

Create post

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


Community stats

  • 20K

    Monthly active users

  • 14K

    Posts

  • 609K

    Comments