News for hackers. Stuff that matters.
Re:A comprehensive study of how fingerprintable users are by M95D on Tuesday November 10, 2026 @06:32PM (#50447826)
> Protections that ship have to keep the web working

I don't agree. I activated most of the protections. If a site breaks, then I don't get to see it. That's OK. No big loss. Users should fight their FOMO.

Re:A comprehensive study of how fingerprintable users are by frenchsalmon on Tuesday November 10, 2026 @07:02PM (#50448052)
Same, if a website requires less protection and I really want to see that content, I just make the effort to lower my config, with high suspicion tho.
Re:A comprehensive study of how fingerprintable users are by somenameforme on Tuesday November 10, 2026 @08:35PM (#50448789)
Agreed. Recently a number of 'news' sites have become hostile enough with the advertising/tracking/etc efforts that I'm now met with a page displaying nothing but "Please enable JS and disable any ad blocker" when visiting them. Especially in modern times, nothing much of value has been lost by simply removing them from my occasional browse list.
Re:A comprehensive study of how fingerprintable users are by socalgal2 on Tuesday November 10, 2026 @08:54PM (#50448911)
so if your bank doesn't work. Do you switch banks? If your apartment portal doesn't work do you move? If your government sites don't work do you move countries?
Re:A comprehensive study of how fingerprintable users are by hahn-kev on Tuesday November 10, 2026 @09:01PM (#50448951)
They'll probably say they just use cash
Re:A comprehensive study of how fingerprintable users are by nofunsir on Wednesday November 11, 2026 @01:11AM (#50450215)
US citizens are legally allowed in-person and traditional mail services for all the examples you listed. It boils down to coercion protection. You can't force me to contact google's servers if I don't want to, in order to access legally protected services.
Re:A comprehensive study of how fingerprintable users are by 1vuio0pswjnm7 on Tuesday November 10, 2026 @11:26PM (#50449732)
Lots of www users are getting fingerprinted no doubt

But it's not difficult to avoid giving away unnecessary details used to create fingerprints, it's just that few people care to do it

I don't use a browser to make HTTP requests, so I have almost full control over fingerprints. There's no Javascript, cookies, CSS or images. No graphics. I use different combinations of headers, usually only Host and Connection because that's all that's needed. I use different UA values if a UA header is required, I use various TLS libraries, I can manipulate the client hello

Of course anyone can collect a fingerprint but not all fingerprints indicate a worthy ad target. I avoid ads 100%. There are probsbly "bots" that send more details than me

"OHTTP" sounds like the dumbest idea I have heard in a while. That's an opinion, everyone has one. "Oblivious" is certainly the right word. It's aimed at oblivious people in hopes they will think the problem is solved and continue to send excessive amounts of detail that can be used to create fingerprints