chjj · HackerTrans

vor 11 Minutendiscuss

I think they made the right call on that. It's unclear to me whether hiding the OS is even possible. There's just too much OS-specific behavior that happens inside (and outside) a web browser. It's hard to account for all of it.

OS rendering differences can likely betray you even when canvas extraction is blocked/noised. At least one tor-browser dev has publicly confirmed that you can't even hide the difference between X11 and Wayland[1], nevermind two entirely different OSes.

[1] https://forum.torproject.org/t/linux-is-it-alright-to-run-th...

chjj

vor 38 Minutendiscuss

The analogy falls apart when "your store" is actually a handful of multi-billion dollar corporations that surveil a significant portion of the internet and covertly grant government agencies (and god knows who else) access to the data.

It's passive surveillance on the order of billions of people. It's not a mom-and-pop shop.

chjj

vor 57 Minutendiscuss

I'm not even sure I'd want to make it narrow. I'd start with:

"Information gained via side-channel for the purpose of correlating individuals."

But you'd have to add an enormous amount of legalese after that to make it ironclad. They'll start arguing "this isn't a side-channel", "we're targeting bots, not individuals", etc. You'd have to define every word in that sentence very carefully.

I'd make it sweeping. "Individual" can mean "person", "bot", "suspected bot", "AI agent", "a piece of autonomous or non-autonomous software", basically anything. The "side-channel" definition might get trickier, but I'd rather legit use-cases get burned than privacy get burned.

The OP was downvoted, but I agree. I think fingerprinting should be in the same criminal category as an illegal wiretap.

chjj

vor 2 Stundendiscuss

it's elegant, but i prefer:

    Math.tanh = Math.random;

chjj

vor 3 Monatendiscuss

They didn't call it a day. They created an entire deceptive hype cycle around it.

chjj

vor 4 Monatendiscuss

Yeah, it never works though, as you can see from this example.

chjj

vor 4 Monatendiscuss

You should use AI.

chjj

vor 4 Monatendiscuss

If this is your opinion, I ask you: are you okay with AI reviewing the PRs as well, or do you prefer a human to do it?

Think carefully before responding.

chjj

vor 4 Monatendiscuss

That means all AI code would simply be rejected. This saves time.

chjj

vor 7 Monatendiscuss

Very cool project. Is it always an LD_PRELOAD or can it function as a standalone SOCKS proxy similar to wireproxy?

chjj

vor 7 Monatendiscuss

Fair enough. I haven't looked at the internals of ghostty, so I'll take your word for it.

I'm probably also just taking things personally.

chjj

vor 7 Monatendiscuss

I don't mean to derail discussion about a cool project, but it still seems to imply xterm.js is somehow "improper" emulation (though I might be misreading it).

Terminal emulators are all approximations of terminals, regardless of the programming language.

comments