• lambalicious@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      5
      ·
      8 hours ago

      One known problem is that on Firefox for Linux, every font you install via the package manager becomes a System Font, and thus is immediately “visible” as soon as Use Document Fonts is enabled, irrespective of the setting for CSS font visibility. I’ve even asked about here if it is possible to run multiple fontservers on a single session, as that would help palliate the fingerprinting by running Firefox profiles connected to different font lists.

      As a relatively useful alternative, you can have Firefox profiles on different users, each having their own fontset available at .local/share/fonts, but for that to work you also have to remove all those extra fonts you installed via the package manager.

    • ggtdbz@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      12
      ·
      13 hours ago

      The second big one for me is how shocking I find it that timezone spoofing isn’t standard, now that so many people use VPNs. Why would someone connecting from Sweden have their clock set to GMT? Etc

  • PinkiePieYay2707@pawb.social
    link
    fedilink
    English
    arrow-up
    2
    ·
    12 hours ago

    Very good to see these changes, but could somebody explain this one to me? I don’t understand how that helps with fingerprinting protection…

    The available screen resolution is the screen height minus 48 pixels.

    • lambalicious@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      3
      ·
      8 hours ago

      I don’t know how that helps either, since it is a fixed diff. Just pre-check adding 48 to any sus screen resolution you get reported. Enabling letterboxing by default and reporting the screen resolution as the nearest larger “common” size would be a far more practical response.

    • GottaHaveFaith@fedia.io
      link
      fedilink
      arrow-up
      8
      ·
      12 hours ago

      If I had to guess is because you can be tracked by your screen resolution too, It’s just a way to minimize that. If you start tor browser, for example, it does not open full screen but only occupy a smaller window, for the same reason

      • Sophocles@infosec.pub
        link
        fedilink
        arrow-up
        6
        ·
        9 hours ago

        You can be, duckduckgo was accurately profiling my location from resolution. Librewolf has a setting called letterboxing that fixes this, but you have to turn it on in about:config. Once I did, duckduckgo’s profile wasn’t accurate anymore.

      • PinkiePieYay2707@pawb.social
        link
        fedilink
        English
        arrow-up
        5
        ·
        12 hours ago

        You absolutely can be tracked by screen resolution, especially when using a monitor with unusual resolution (few years ago I was still using 1440x900 so I understand this well). I just don’t understand how this specific change would help prevent that.

        • The_Decryptor@aussie.zone
          link
          fedilink
          English
          arrow-up
          5
          ·
          10 hours ago

          At one point, years ago, they were talking about removing the screen resolution entirely, and just make it a copy of the window size values instead.

          Guessing it broke too much stuff, since it seemed like a nice idea but never eventuated.

    • Tollana1234567@lemmy.today
      link
      fedilink
      arrow-up
      4
      arrow-down
      1
      ·
      edit-2
      14 hours ago

      brave have it, but it doesnt look it will, reddit is too smart for that. you need things to spoof you fingerprint, IP address, device and components. im on a forum where they use anti-detect browser(not an actual browser, but to open instances of a browser using different ip/devices,etc) to manage all of this, plus you need an reddit account thats not tainted. i think reddit is too used to mozilla already, things adspower, dolphin anty, is one of many that does this.