3 ms·

> Won't this likely result in browser detection to be pushed to JavaScript and create an arms escalation race? NoScript. https://noscript.net/ https://noscrip

• heavyset_go 4y ago
  There are plenty of services that won't serve you data, neither web app nor data from API calls, if you aren't running a JS engine.
  • bee_rider 4y ago
    If they are important enough, add an exception.
    • heavyset_go 4y ago
      My point with my comment was addressing the GP's claim about fingerprinting being pushed to JavaScript in an arms race, which is what's happening and is something that NoScript can't really stop unless millions/billions of people start using it. NoScript is great, I use it, but isn't a solution to fingerprinting via JS if you actually want to talk to the servers that fingerprint that way.
• IIsi50MHz 4y ago
  Can we presume a premise that having Javascript disabled is the dominant condition, and therefore does not make a browser stand out from the herd? What if having it disabled is true of only a small percentage of browsers?. If we assume that the user-agent string is set to whatever is "most common", and Javascript is disabled, are there no other identifiable bits of information? What about CSS fingerprinting? Perhaps the expected adversaries are not sufficiently motivated to try to sort somebody into a cohort based on lack of Javascript, and the remaining observable data? (But not saying NoScript has no uses.)