Actually i spoof the location to say you're at area 51 in my remote isolated browser. It's done using chrome DevTools protocol, which is very simple to use, using the method `Emulation.setGeolocationOverride`[1]

You can try the demo https://demo.browsergap.dosyago.com/

and you want to go to the "Browser Geolocation" link at this site https://mylocation.org/

[0]: https://github.com/c9fe/ViewFinder

[1]: https://chromedevtools.github.io/devtools-protocol/tot/Emula...

This is doable right now with some effort, which I kind of like because it keeps the cat-and-mouse game paused for a while.

The moment someone makes a one-click browser that lets the average person spoof all these things, then sites are going to start building captcha-style verification mechanisms like having to "wink three times" in your video to get it to proceed.

> mechanisms like having to "wink three times" in your video to get it to proceed

Deepfakes are already here, we have that cat (or mouse) taken care of.

But someone would still have to program that SnapCam filter specifically for each captcha, and that process is not widespread and easy yet, so it will pause for a few more years hopefully.

I’d love for this idea to be applied to tracking cookies.

Just keep a pool of a hundred million of them, and send some at random with each request.

Hmm maybe I could use injected JavaScript and allow third party cookies in Chromium but use my injected JavaScript to randomly flip some bits in all third party cookies. And first party cookies for sites that I haven't explicitly whitelisted.

I also wonder how many database backends this will trip up due to invalid IDs, though that's not really my intention.

> This helps get past websites that evilly require access to these permissions to function.

Wow, what website is that evil?

I'm not sure but for a while WeChat (the app) would not let you login if you did not give it location permissions. I think they've changed that but they still unscrupulously scan your Wi-Fi networks from time to time.

I haven't yet seen a website do that, but they conceivably could.

Lots of media presences that either clearly didn't get the memo on "how to implement GDPR correctly" or who still are determined on selling out their users, for one.

Technically speaking, at least in German jurisdiction the way to completely be in compliance with GDPR is to not even load a single library or other asset from any third party servers (the point being that the third party receives the datum of the user's visit timestamp, their IP address, and the referrer) without the user's explicit consent. Anything else opens you up for issues.

I don't personally believe anyone needs to actually implement GDPR unless they have a company registered in the EU.

I do believe in privacy and the general intent of GDPR, but EU laws shouldn't take effect outside their jurisdiction any more than Iranian laws or Chinese laws.