• 1 Post
  • 16 Comments
Joined 1 year ago
cake
Cake day: August 4th, 2023

help-circle



  • TootSweet@lemmy.worldtoOpen Source@lemmy.mlNewPipe v0.27.0 No longer Working? [Update]
    link
    fedilink
    English
    arrow-up
    20
    arrow-down
    2
    ·
    edit-2
    2 months ago

    Just in case this matters to OP or anyone else in this thread, Grayjay isn’t Open Source, despite Rossman’s and FUTO’s claims to the contrary. Its license disallows any commercial use of Grayjay, and also disallows removing any features related to paying FUTO. Which disqualify Grayjay as “Open Source” by the OSI’s definition.

    And consequently, F-Droid won’t distribute Grayjay unless they change their license.


  • TootSweet@lemmy.worldtoPrivacy@lemmy.mlNo script help.
    link
    fedilink
    English
    arrow-up
    8
    ·
    edit-2
    2 months ago

    A lot of user fingerprinting techniques rely on JS. Plus, by shutting off JS, you reduce the attack surface of your browser. If, let’s say, there was a zero-day vulnerability in Firefox that required JS to exploit, you’d be shutting off that whole means of attack if you blocked all/most JS out there on the internet. Mining cryptocurrencies on your computer via your browser can only be accomplished with the help of Javascript. A lot of forever cookie techniques require Javascript.

    uBlock origin is for kindof a different use case. It’s for if you’re on one website that you don’t necessarily suspect of evil dealings that might include buttons (like social media sharing buttons, for instance) or other scripts (like ad displaying scripts or analytics scripts) from third parties that might include evil tracking stuff. If I started a blog on https://theawesomeestblog.com/ and included script from Facebook that puts a share button on my page, and if you then visited my blog, Facebook would know because your browser would make requests from your IP with cookies they’d placed on your brower previously and JS included with the button could very well be used to do additional fingerprinting.

    NoScript is for (among other things) when you don’t even necessarily trust the website you’re purposefully visiting. Like, I don’t know if cnn.com mines Bitcoin via JS on users’ browsers (and, honestly, it seems a little unlikely to me, I think), but if I disallow JS on cnn.com, then when I click a link in Lemmy to a cnn.com article (and maybe I don’t even really know I’m going to cnn.com when I click the link – it might use a link shortener or something – or maybe it’s not cnn.com, but some reasonably-trustworthy-sounding news-y-sounding domain that I haven’t heard of before), I know it’s not mining Bitcoin on my machine.

    Oh, and as others have said, NoScript is Open Source. Says so right near the top of the home page.



  • Yeah, I was just looking through some documentation on it. It says it uses a “digital wallet”. Maybe people are seeing that and thinking that means it’s blockchain-based? I’m not seeing anything more solid claiming there’s any blockchain involved, though. (I’m not 100% certain there isn’t any blockchain involved, though.)

    It’s BS either way. Extra super plus plus BS if it’s blockchain-based. But still BS even if there’s no blockchain involved.


  • One of the crucial differences between blockchain and Git is that Git is fully subserviant to humans and anything can be undone by humans.

    If your blockchain house title is stolen by a hacker, either the courts (rightfully) aren’t going to put any significance on the state of the blockchain and are going to say “yeah, you still own your house” (in which case what was the point of using blockchain in the first place rather than a SQL database or some such where mistakes and problems and fraud can be undone without cryptographically-hard obstacles in the way) or if in this hypothetical the Libertarian dystopia has progressed to cartoonish extremes, you’re just SOL and lost your house, which just isn’t even remotely realistic.


  • I think having a way to delete accounts is legally required by some jurisdictions. And sometimes if a site does business in such a jurisdiction and are required to have a way to do that, they’ll still offer that option those outside the jurisdictions in question. (It’s easier to just allow everyone who asks than to have rules keeping track of who can and can’t legally demand it.)

    But if this is an image board hosted in Japan intended for a Japanese audience, and if Japan has no such legal requirements (or if such requirements don’t apply here for some reason), then, your experience with websites that operate in/for countries where they speak your language(s) notwithstanding, it’s highly plausible this site just doesn’t have any way to delete accounts.


  • Your concern is that a breach of the site’s data may leak some information about you that you wouldn’t want to leak, yes?

    If so, and if you can still use similar methods to navigate the site in question, use those methods to edit your account/profile details to scrub the account of anything that you wouldn’t want to leak. Change it to use a fake name. Change the email address to somthrowaway email address. Change the password to something unrelated to any passwords you could possibly use on any other sites so that if the hash is leaked and brute forced, no one can use that to gain access to any of your other accounts. Delete individual posts or pieces of content that you’ve uploaded.

    Actually, I can read (barely) enough Japanese to figure out that the registration process seems to only want your email address and password. (Though I haven’t gone through the whole signup process.) You mentioned uploading a file, yeah? I’m guessing the amount of stuff you’d have to do to overwrite/delete every bit of data they have on you is pretty limited.

    And, yes, I suppose there’s the potential caveat that that might not affect backups and such, but I’d wager a lot of the other account deletion requests you’ve done don’t affect things like backups either.