News for hackers. Stuff that matters.
Re:The Washington Post is preparing for post-cookie ad targe... by dvfjsdhgfv on Thursday July 18, 2019 @07:44AM (#20468739)
For me it works like this: the default is disabled. When something doesn't work (actually The Washington Post works great, much better than with JS on), I esitmate the tradeoffs: if it's a really useful website with JS functionality that is actually useful to me (say, with JS doing the math notation rendering or an app I badly need), I enable JS. Otherwise, why bother?

JS is like ads used to be: first they put it everywhere, then you get fed up and just switch it off.

Re:The Washington Post is preparing for post-cookie ad targe... by KozmoNau7 on Thursday July 18, 2019 @08:07AM (#20468899)
Do you block all JS, including 1st party and inline scripts, or only 3rd party scripts and resources?

I've used uBlock Origin to block all 3rd party scripts and frames for a while, but I'm seriously considering going full default-deny all scripts and other active content.

Re:The Washington Post is preparing for post-cookie ad targe... by mywittyname on Thursday July 18, 2019 @01:21PM (#20471985)
I default deny all, then selectively enable scripts to add missing functionality. It can be a pain to get Gawker sites to work, but the vast majority work perfectly after enabling first party scripts and maybe cloudfront.
Re:The Washington Post is preparing for post-cookie ad targe... by tomatotomato37 on Thursday July 18, 2019 @10:43AM (#20470319)
I'd suggest a selective scriprlt blocker like umatrix (my recommendation) or noscript. Do note you will have to invest some time toggling & refreshing on some of the more complex sites until you figure out whatever web of cdns and auxiliary scripts is used to run their stuff
Re:The Washington Post is preparing for post-cookie ad targe... by nathanaldensr on Thursday July 18, 2019 @08:44AM (#20469152)
Not the GP, but I block all scripts by default with NoScript, then selectively enable them, starting with the first-party scripts. I've learned to identify likely tracking domains and have memorized several of the more widespread ones, so over time this technique has proven effective.
Re:The Washington Post is preparing for post-cookie ad targe... by immanentizer on Thursday July 18, 2019 @09:08AM (#20469342)
Why would you need to memorize them when you can just mark them explicitly untrusted?