The problem is that that by being "that guy" you're probably giving them 10 bits or more of identification. If they can just scrape a few more bits from somewhere they'll have you uniquely identified.

But, yeah, these guys can get on Golgafrinchan Ark B with the rest of the adtech industry as far as I am concerned.

I need to be more offline then.

Good luck, I recently gave up that fight after needing to disable it to view the content of nearly every single website I visited.

It's not even just cloudflare and similar DDOS checks, but now even things that should just be in the HTML of the page are loaded with JS.

Good luck. It's amazing how little of today's web is good old HTML. A while ago I visited a website that used Markup - but that wasn't compiled into HTML and then statically served, oh no - it was rendered in JS client side. WTF.

It's exactly such reasons why TOR browsers would have JS disabled.

As the internet gets more and more hostile, this will become more and more correct.

they compute the deviceid on the server using signals from the browser. i think having js disabled is just another signal.

Join me, and do it! There is a great Firefox extension called uMatrix, which makes it easy to disable JavaScript not just on a site-by-site basis, but also by subdomain (and easy to re-enable for sites that break without js).

It won't save from fingerprinting: https://fingerprint.com/blog/disabling-javascript-wont-stop-.... Though I don't think it's used in practice, because disabled JS is a red flag on its own in situations where fingerprinting is used for security.