After a long while, I checked back on the arkenfox.js github page, and they no longer mention two extensions I still use: (1) CanvasBlocker (because if Resist Fingerprinting is enabled in about:config, the per page zoom levels get changed and that drives me crazy), and (2) Smart Referer (because, well, it was recommended). I know that good old UBlock Origin can block javascript, but I’ve been using (3) JavaScript Control because it’s easier to access from the URL bar. So are these three still useful? To answer my own question: I might give RFP another try so I won’t need CanvasBlocker. Since I can achieve what CanvasBlocker and JS Control do with about:config and UBlock tweaks, respectively, I guess I’m mainly interested in what people think about Smart Referer. Also sort of a noodly post.

  • Mnglw@beehaw.org
    9·
    11 months ago

    resist fingerprinting resets zoom levels because its used as a way to fingerprint, sites can get zoom levels and the idea is to blend into the crowd

    that said, I share your frustration, I have to disable Resist Fingerprint because of that, the persistent zoom levels are an accessibility requirement for me, no negotiations possible.

    Ideally Resist Fingerprinting would allow for more granular options because while I understand the “blending into the crowd” aspect of the option as it is now, it just doesn’t work like this for me and many others with accessibility needs, and that should be addressed

    (also replying so I remember to check back for replies, sorry for the ramble, Resist Fingerprinting as it is now annoys me)

    • jarfil@beehaw.org
      5·
      11 months ago

      As long as sites can get zoom levels, it seems to me like you’ll have to choose one or the other.

      Now, if I’m not mistaken, the only way to do that, is via JavaScript, so disabling JS on a site should block that. Alternatively, block or sanitize the JS call used to calculate the canvas vs. window size (maybe via Tampermonkey?). Or just return a window size equal to the canvas size (I’m kind of surprised RFP doesn’t do that).

      • Mnglw@beehaw.org
        3·
        11 months ago

        which part of “no negotiations possible” do you not get?

        I would like a more granular choice, acccessibility is not something I can give up, I don’t care sites can fingerprint me with it

        • jarfil@beehaw.org
          2·
          11 months ago

          Hm, which parameter would you want to get removed?

          From what I can see, you can either specify a fixed parameter name, or use a REGEXP… I could help you write an optimized REGEXP if that’s what you need, the example /^utm_/ one seems to target Google’s tracking and be simple enough… but is that what you want to do?