News for hackers. Stuff that matters.
Re:Public CDNs Are Useless and Dangerous by aqfamnzc on Thursday June 09, 2022 @08:58AM (#31680658)
Is there a setting or extension that just uses the closest available system font and blocks the remote API?
Re:Public CDNs Are Useless and Dangerous by shakna on Thursday June 09, 2022 @09:37AM (#31680968)
You can disable 3rd party fonts.

On Firefox, this is as simple as going to about:config and setting gfx.downloadable_fonts.enabled to false.

On Chrome, it requires adding the flag --disable-remote-fonts to however you're opening it.

Re:Public CDNs Are Useless and Dangerous by usrn on Thursday June 09, 2022 @03:14PM (#31685525)
This breaks a lot of sites that use custom fonts as compressed replacements for monochrome SVGs.
Re:Public CDNs Are Useless and Dangerous by shakna on Thursday June 09, 2022 @10:11PM (#31689210)
Those sites are already broken for accessibility.
Re:Public CDNs Are Useless and Dangerous by HelloNurse on Thursday June 09, 2022 @09:26AM (#31680867)
The "closest available system font" is determined by the font names in a site's stylesheets, not by magic.
Re:Public CDNs Are Useless and Dangerous by jaywalk on Thursday June 09, 2022 @09:27AM (#31680871)
There is no way that a browser could figure out what the "closest available" system font is, or that one even exists. It's up to the designer to specify the font(s) to be used.