Create No-JavaScript friendly sites

Re:Create No-JavaScript friendly sites by austincheney on Monday June 22, 2020 @03:25PM (#23604966)

You can perform analytics almost as well from just the HTTP headers, you don’t need JS at all for fingerprinting, and hijacked NPM modules are probably still present even if there is no JS pushed into the browser.

[ Parent | on HN ]

Re:Create No-JavaScript friendly sites by jchook on Monday June 22, 2020 @03:58PM (#23605586)

Curious, how do you do fingerprinting without JS? User agent, header order, etc? How well does it work?

[ Parent | on HN ]

Re:Create No-JavaScript friendly sites by Beldin on Monday June 22, 2020 @04:35PM (#23606209)

Basically, each layer of any implementation of the OSI stack will have its own peculiarities. E.g. there's a paper on re-identifying computers via TCP clock drift.

How well they work depends on the amount of effort you're putting in. Since Javascript is easy and offers a very rich attack surface, there seems to be little rain to really plunge the depths of other layers.

[ Parent | on HN ]

Re:Create No-JavaScript friendly sites by paulryanrogers on Monday June 22, 2020 @04:09PM (#23605777)

Panopticlick did some of this with headers included, their order, and their timing. Which of course can be defeated without much loss of features. Tor Browser being one example

[ Parent | on HN ]

Re:Create No-JavaScript friendly sites by ratww on Monday June 22, 2020 @04:39PM (#23606288)

Cookie?

[ Parent | on HN ]

Re:Create No-JavaScript friendly sites by aabbcc1241 on Monday June 22, 2020 @08:29PM (#23608656)

and also transparent pixel

[ Parent | on HN ]