Your regular reminder that Robert Reich opposed building affordable housing in his rich Berkeley neighborhood. He talks a good game about helping low income people. Unless they intend to live anywhere near him. www.reddit.com/r/berkeley/c...
RE: bsky.app/profile/did:plc:p3yen…
Is there a way to block browser JavaScript from executing commands that retrieve sensitive information from my local machine, while still allowing JavaScript that is only used for rendering web pages?
As a security-conscious user, I've used NoScript since Firefox's early days, but its restrictive nature has become frustrating. I'm often forced to go unprotected just to access websites with multiple scripts running on different domains, which defeats the purpose of using NoScript and balances security and usability that it once provided.
Is there a way to block browser JavaScript from executing commands that retrieve sensitive information from my local machine, while still allowing JavaScript that is only used for rendering web pages?
by sensitive information I'm referring to
- local machine time
- local machine ram
- local machine operating system + version
- local machine hardware
- Serial Number
- Hardware ID
- UUID
- Windows Device ID
- Windows Product ID
- ...
greatly appreciate any insight
EDIT:
could be possible solution
discuss.grapheneos.org/d/16025…
- ~~LibreJS: GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap.~~
- JShelter: Mitigates potential threats from JavaScript, including fingerprinting, tracking, and data collection. Slightly modifies the results of API calls, differently on different domains, so that the cross-site fingerprint is not stable. Applies security counter-measures that are likely not to break web pages. Allows fine-grained control over the restrictions and counter-measures applied to each domain.
Most of those things cannot be collected through JavaScript.Local time can.
RAM can only be approximated to protect user privacy. Edit: And it’s not available on Firefox.
OS+version are already in your browser’s user-agent string that is sent out with every request you make.
Machine hardware cannot be enumerated. JavaScript can try to guess your GPU based on what it can do with WebGL.
There is no way to get a serial number or similar.
To spoof timezone/OS+version/browser+version ... and disable WebGL, use sereneblue.github.io/chameleon…
- lemmy.world/post/31885153
Vanadium and what to use on desktop - GrapheneOS Discussion Forum
GrapheneOS discussion forumGrapheneOS Discussion Forum
Never found a better plugin - chameleon
sereneblue.github.io/chameleon…strongly recommend
like this
act.350.org/sign/jun-25-em-pet…
US citizens: call on JPMorgan Chase to stop bankrolling fossil fuel exploration in the Amazon.
Tell JPMorgan Chase: Stop bankrolling fossil fuel exploration in the Amazon!
Right now, Brazil is selling off parts of the Amazon Rainforest to fossil fuel companies. JPMorgan Chase is one of the top funders of fossil fuel development in the Amazon, despite its claims to fight biodiversity loss and exploitation of Indigenous …act.350.org
chacun dans sa bulle
Luca Gennatiempo, In The Circle
tag : incommunicabilité, #beach #socialmedia #society #psychology #photography
Compass Sues Zillow as Fight Over Private Home Listings Heats Up
https://www.bloomberg.com/news/articles/2025-06-23/compass-sues-zillow-as-fight-over-private-home-listings-heats-up?utm_source=flipboard&utm_medium=activitypub
Posted into Profiles @profiles-bloomberg
We will end this war, Iran warns ‘gambler’ Trump
Trump posts on Truth Social to "make Iran great again"; calls Sunday's US strikes on Iran a "bullseye".DAWN.COM
Just added a full article to the VEX.blue BETA site!
I wrote it during the 2.2 redesign; when I rebuilt the coding the site from scratch (half a year ago), figuring out design, RSS, and even future plans for tutorials like "How to join the Fediverse?"
Oh and it now supports Fediverse comments! (Just reply to this post)
Reply via your timeline 🌀
new.vex.blue/articles/2024/09/…
#VEXblue #Fediverse #OpenWeb #IndieWeb #Blogging #WebDev #RSS #StaticSite #DevJournal #Mastodon
The Thunder are NBA champions, and they might be just getting started
https://apnews.com/article/nba-finals-thunder-champions-8076a3f4d6fec9b0c2bbbbd79f17ef38?utm_source=flipboard&utm_medium=activitypub
Posted into Sports @sports-AssociatedPress
https://www.techtudo.com.br/guia/2025/06/tiktok-shop-e-confiavel-5-coisas-que-voce-precisa-saber-sobre-a-loja-edapps.ghtml?utm_source=flipboard&utm_medium=activitypub
TikTok Shop é confiável? 5 coisas que você precisa saber sobre a loja
TikTok Shop é seguro? Essa é a dúvida de alguns usuários que pretendem usar a loja do TikTok. Conheça mais detalhes da ferramenta de compras nativa do aplicativo chinêsTechtudo
J.J. Spaun's path to U.S. Open title helped by a shot onto an umbrella
https://apnews.com/article/jj-spaun-diabetes-us-open-oakmont-travelers-580e244e8c508c48f5e02c1afb258390?utm_source=flipboard&utm_medium=activitypub
Posted into Sports @sports-AssociatedPress
Improved of late, the Orioles still face an uphill climb to avoid a lost season
https://apnews.com/article/baltimore-orioles-postseason-hopes-padres-royals-guardians-59a3e9a391acaa424b167511bb0ad9ff?utm_source=flipboard&utm_medium=activitypub
Posted into Sports @sports-AssociatedPress
https://www.techtudo.com.br/listas/2025/06/organizei-minha-alimentacao-com-o-chatgpt-5-prompts-para-usar-agora-edsoftwares.ghtml?utm_source=flipboard&utm_medium=activitypub
Organizei minha alimentação com o ChatGPT — 5 prompts para usar agora
Prompts no ChatGPT podem auxiliar na organização de refeições, plano alimentares e listas de compras de acordo com diferentes dietas e objetivos pessoais; confiraTechtudo
DHL, UPS, FedEx, and Walmart are using robots to boost warehouse efficiency and cut costs, including automating the physically demanding task of loading trucks (Esther Fung/Wall Street Journal)
wsj.com/business/logistics/the…
techmeme.com/250623/p10#a25062…
DHL, UPS, FedEx, and Walmart are using robots to boost warehouse efficiency and cut costs, including automating the physically demanding task of loading trucks
By Esther Fung / Wall Street Journal. View the full context on Techmeme.Techmeme
Karabakh addio
Le radici del conflitto tra Armenia e Azerbaigian. Le guerre degli ultimi trent’anni, l’esodo degli armeni e il futuro della regione. Un reportage storico per capire una delle crisi più intricate della nostra epoca LeggiBartłomiej Krysztan (Internazionale)
Zeppe reshared this.
US Strikes on Iran Test Middle East's Finance Ambitions
https://www.bloomberg.com/news/newsletters/2025-06-23/us-strikes-on-iran-test-uae-saudi-arabia-qatar-s-finance-ambitions?utm_source=flipboard&utm_medium=activitypub
Posted into Business @business-bloomberg
Novo Exits Hims & Hers Partnership, Citing Compounding Concerns
https://www.bloomberg.com/news/articles/2025-06-23/novo-exits-hims-hers-partnership-citing-compounding-concerns?utm_source=flipboard&utm_medium=activitypub
Posted into Business @business-bloomberg
Das Bild zeigt eine Gruppe von sechs Militärs in Uniform, die an einem langen, rechteckigen Tisch sitzen. Sie befinden sich in einem Konferenzraum, der mit einer großen Weltkarte an der Wand hinter ihnen geschmückt ist. Die Uniformen der Militärs sind mit verschiedenen Abzeichen und Orden verziert, was auf ihre Ränge und Rollen hinweist. Links und rechts der Weltkarte hängen Porträts von Personen, die wahrscheinlich wichtige Persönlichkeiten sind. Die Flagge des Iran ist an der linken Wand sichtbar. Auf dem Tisch befinden sich Mikrofone und Dokumente, was auf eine formelle Besprechung hinweist. Im unteren Bereich des Bildes ist ein Text zu sehen, der auf Deutsch lautet: "tagesschau - vor 'Zyklus der Zerstörung' im Nahen Osten - Krieg gegen die Ukraine: Ukraine meldet mehrere Tote in Kiew durch russische Aktionen." Die Uhrzeit in der oberen linken Ecke zeigt 14:03 an.
Bereitgestellt von @altbot, privat und lokal generiert mit Ovis2-8B
🌱 Energieverbrauch: 0.258 Wh
Mario Kart 64 gets a fan-made PC port gamingonlinux.com/2025/06/mari…
#MarioKart64 #Gaming #Nintendo #RetroGaming
Mario Kart 64 gets a fan-made PC port
Hosted by Harbour Masters who also provide ports for other Nintendo classics, the PC port of Mario Kart 64 is now available to test.Liam Dawe (GamingOnLinux)
reshared this
6 reported dead and 2 missing after a boat capsizes on Lake Tahoe in California
https://apnews.com/article/lake-tahoe-boat-capsized-7e07a1df64297d20e55e60dc5b339441?utm_source=flipboard&utm_medium=activitypub
Posted into U.S. News @u-s-news-AssociatedPress
"At their heart, these technologies infringe human rights."
Last week @sianberry tabled an amendment to the UK Crime and Policing Bill that would prohibit the use and deployment of dangerous 'crime-predicting' police tech.
These systems will subject overpoliced communities to more surveillance. More discrimination. More injustice.
Sign the petition to BAN it ➡️ you.38degrees.org.uk/petitions…
#SafetyNotSurveillance #surveillance #precrime #predictivepolicing #police #policing #ukpolitics #ukpol
Ban ‘Crime Predicting’ Police Tech
The Lie AI and police tech don’t predict crime - they predict policing. These technologies are built on existing, flawed, police data.38 Degrees
Cory Doctorow reshared this.
"takes no shit" -Pigsucking mayor sucking shit right from the pigpen
Lol @ that profile trying to sound tough
Iran’s parliament backs blocking Strait of Hormuz. Its closure would alienate Tehran further
The decision to close the waterway now rests with the country's national security council.Lim Hui Jie (CNBC)
Castiñeiro en flor
non se ve na foto, pero soaba como un examio 🐝 🐝 de tantos insectos que había ao pole
Have your say and help shape the future of tourism in the EU.
We are working on a new tourism strategy and are inviting citizens, travellers, and tourism professionals to weigh in.
Share your thoughts on:
🌱 Sustainability
🌐 Digitalisation
🌈 Inclusivity
🚀 Innovation
Help us shape a tourism sector that’s fairer, greener, and more resilient – for people, places, and the planet. 🌍
Contribute to our public consultation by 12 September 2025 👉 europa.eu/!cgFnQj
reshared this
Stop facism, because facism is not welcoming.
Work on integration and welcome diversity!
Fix public transport.
Non è una foto fatta con qualche intelligenza artificiale. Bill Gates e Linus Torvalds si sono incontrati pubblicamente per la prima volta ad una cena informale dopo decenni di attività nel settore tecnologico... Mi piacerebbe sapere cosa si son detti 🤓
Qualcuno ha qualche info a riguardo?
ammetto l'ignoranza di non conoscere i due personaggi agli estremi.
E comunque quant'è ingrassato Bill... :/
Diddy trial live updates: Prosecution nears end in Sean Combs’s case
https://www.washingtonpost.com/entertainment/music/2025/06/23/diddy-trial-live-updates-sean-combs/?utm_source=flipboard&utm_medium=activitypub
Posted into Entertainment @entertainment-WashPost
In the Chaoyang Business District (CBD) in #Beijing
#monochrome #blackandwhite #photography #urbangaze
#blacknwhite #bnw #blackandwhitephotography
#cityscape #building #office #tower #China #Beijing #bnw_zone #architecture
Report: Apple to announce ‘some’ App Store changes in the EU to avoid additional DMA fines
https://9to5mac.com/2025/06/23/app-store-changes-eu-dma-fines/?utm_source=flipboard&utm_medium=activitypub
Posted into All Stories @all-stories-9to5mac
Report: Apple to announce 'some' App Store changes in the EU to avoid additional DMA fines - 9to5Mac
In April, Apple was fined 500 million euros for violating the Digital Markets Act in the European Union. Since that...Chance Miller (9to5Mac)
Which airports are closed and where flights are cancelled amid Israel–Iran conflict?
https://flipboard.com/video/euronews/48fde0a3fe?utm_source=flipboard&utm_medium=activitypub
Posted into Travel Videos @travel-videos-euronews
Which airports are closed and where flights are cancelled amid Israel–Iran conflict? | Flipboard
A number of airlines have cancelled or suspended services to the Middle East due to escalating conflict in the region.Flipboard
Highlights from Milan Fashion Week: Dolce & Gabbana, Prada, and Armani steal the spotlight
https://flipboard.com/video/euronews/cec83c5a7a?utm_source=flipboard&utm_medium=activitypub
Posted into Culture Videos @culture-videos-euronews
Highlights from Milan Fashion Week: Dolce & Gabbana, Prada, and Armani steal the spotlight | Flipboard
Milan Fashion Week returned with full force for the Spring/Summer 2026 menswear season, bringing together sharp tailoring, creative flair, global star power and some very amusing headwear.Flipboard
Il caloroso benvenuto dei veneziani a Bezos! ❤️
Per chi è ancora su Amazon, Twitch, Prime & Co., contribuendo ad arricchire gli oligarchi del web e a finanziare (indirettamente) le politiche di Trump, non fate i servi di un tecno-feudatario.
Le alternative esistono, sono molte e funzionano.
👉 Una vita senza Amazon: perché è ora di dire basta noblogo.org/filippodb/una-vita…
#jeffbezos #Bezos #Amazon #Twitch #Prime #Alternative
Una vita senza Amazon: perché è ora di dire basta
L’indifferenza è complicità.
Ho vissuto a Venezia, per studio e durante la leva. Per questo, oggi mi unisco con convinzione ai comitati e alle associazioni cittadine che stanno contestando la presenza di Jeff Bezos nella città lagunare. Non è solo una questione simbolica: è una presa di posizione civile contro ciò che rappresenta.
Jeff Bezos non è un semplice imprenditore. È uno dei volti più potenti dell’oligarchia economica che gravita attorno a Donald Trump. Ha sostenuto apertamente la sua campagna elettorale, ha messo a disposizione il Washington Post quando faceva comodo, e si è presentato sorridente e in prima fila al suo insediamento, accanto a Elon Musk e agli altri signori del tecno-capitalismo.
Dietro la facciata dei servizi comodi e delle spedizioni veloci, Amazon è un colosso costruito sullo sfruttamento, sull’elusione fiscale, sulla distruzione del commercio locale e su un modello economico che concentra potere e ricchezza in pochissime mani. A scapito di tutti gli altri.
Ogni acquisto è un voto
Ogni volta che acquistate su Amazon, ogni volta che guardate qualcosa su Prime Video, che fate una diretta su Twitch o dite “Alexa”, state finanziando Bezos. State dando forza a un sistema che calpesta diritti, silenzia giornalisti e artisti, sfrutta lavoratori e svuota interi quartieri di botteghe reali.La lista delle accuse è lunga e documentata:
- Censura dell’endorsement del Washington Post a Kamala Harris (ilfattoquotidiano.it/2024/10/2…)
- Sostegno pubblico a Trump: “Se posso essere d’aiuto, lo farò volentieri” (corriere.it/esteri/24_dicembre…)
- Sfruttamento della passion economy su Twitch, raccontato in questo video su PeerTube
- Le condizioni di lavoro nei magazzini Amazon documentate in innumerevoli inchieste
George Takei l’ha detto chiaramente:
“Se Jeff Bezos si arrende di fronte al potere, noi consumatori dovremmo mostrargli il nostro. RIMANENDO FUORI DA AMAZON.”Come vivere senza Amazon e i suoi servizi
Vivere senza Amazon è non solo possibile, ma liberatorio. Dopo più di un anno di boicottaggio, posso confermare che si vive benissimo senza dare un euro a Bezos. Ecco una guida pratica per liberarsi, passo dopo passo:📚 Libri (al posto di Amazon e Goodreads)
- Libraccio.it
- Bookdealer.it
- Librerie.coop
- Bookwyrm.it – social per lettori, decentralizzato e alternativo a Goodreads
🎥 Video e streaming (al posto di Prime Video e Twitch)
- Stremio – per guardare film e serie legalmente da più fonti
- Owncast – alternativa libera a Twitch
- PeerTube – piattaforma video federata, senza pubblicità e algoritmi tossici
🛍️ Acquisti (senza Amazon)
Elettronica:
Nuovo:
Usato:
🎂 25 anni con Amazon: tempo di cancellare
Quest’anno ho festeggiato i 25 anni da quando avevo aperto un account Amazon. Un pezzo d’archeologia digitale come l’email di Libero, ma era ora di dire basta. Non solo ho smesso di usarlo da tempo: ho deciso di chiuderlo definitivamente.Se anche voi siete stanchi di finanziare un sistema che va contro i vostri valori, agite. Non limitatevi a lamentarvi. Disattivate. Cancellate. Scegliete.
🧠 Informati, condividi, agisci
📺 Video da vedere assolutamente:Segui il canale: @unavitasenzabigtech
✊ Scegli da che parte stare
Venezia non ha bisogno di miliardari in yacht che la trattano come una passerella di lusso. Il web non ha bisogno di un monopolio che distrugge ogni forma di alternativa. Il mondo ha bisogno di cittadini consapevoli, non di consumatori passivi.Bezos può comprare di tutto. Ma non deve comprare anche noi.
È tempo di scegliere. Scegliamo il Piccolo Web. Scegliamo il locale, l’etico, il federato. Scegliamo di dire NO ad Amazon.
Supporta servizi liberi e indipenenti dalle big tech
Devol gestisce un ampio numero di servizi alternativi a amazon e alle bigtech: servizi.devol.it I costi di hosting sono supportati dalle donazioni, puoi sostenere i servizi con liberapay: liberapay.com/devol o offrendo un caffè: ko-fi.com/devol grazie!Per seguirmi
Attraverso questo blog su @filippodb@noblogo.org (attivate la campanella per essere notificati) su mastodon: @filippodb@mastodon.unoOppure iscrivetevi alla newsletter: newsletter.devol.it
(creativecommons.org/licenses/b…)
Anche Bezos si allinea: i big della Silicon Valley alla corte di Trump. Ma Musk non si fida
Dopo Zuckerberg e Altman, l’ex bestia nera del tycoon offre il suo sostegnoMassimo Gaggi (Corriere della Sera)
reshared this
Articolo interessante sullo stesso concetto ma da un altro punto di vista
politico.eu/article/donald-tru…
Trump can pull the plug on the internet, and Europe can’t do anything about it
Trump is back — and with him, the risk that the U.S. could unplug Europe from the digital world.Mathieu Pollet (POLITICO)
Open Internet Italia - Servizi Web liberi reshared this.
0x01
in reply to Holeheadou92984 • • •Holeheadou92984
in reply to 0x01 • • •by sensitive information I'm referring to
- local machine time
- local machine ram
- local machine operating system + version
- local machine hardware
- Serial Number
- Hardware ID
- UUID
- Windows Device ID
- Windows Product ID
- ...
Can I prevent javascript from running specific command that retrieve these information?
0x01
in reply to Holeheadou92984 • • •You could monkeypatch some javascript functions like the constructor Date types, but there will always be things not thought of that will leak date info. Hardware identifiers are quite difficult to get in javascript and several browsers already obfuscate that info.
Honestly if you're very concerned, I really do think a virtual machine is your absolute safest approach, obviously the browsing experience is worse.
Check out amiunique.org to see what fingerprinting is generally available in your current browser
rschofield
in reply to Holeheadou92984 • • •Pi-hole – Network-wide Ad Blocking
pi-hole.netHoleheadou92984
in reply to rschofield • • •hexagonwin
in reply to Holeheadou92984 • • •Holeheadou92984
in reply to hexagonwin • • •bacon_pdp
in reply to Holeheadou92984 • • •This is the closest thing I have found
gnu.org/software/librejs/index…
LibreJS - GNU Project - Free Software Foundation
www.gnu.orgHoleheadou92984
in reply to bacon_pdp • • •Holeheadou92984
in reply to bacon_pdp • • •wizardbeard
in reply to Holeheadou92984 • • •Harsh question: Do you have a real need to prevent this data from being collected, or are you investigating just for ~~funsies~~ best practice advice? There are a lot of posts like this where people overestimate the threat model they have and insist on needing to block things that are nearly impossible to, or at least have significant tradeoffs like you are dealing with now.
Javascript is also not the only source that sites can use for these pieces of info from your machine. Local time in particular can be estimated by looking up the rough location of your IP address then matching to a time zone.
Anyway.
I would assume you could technically fork localCDN (replaces remote javascript libraries with local copies) and then manually edit the local javascript library copies to remove the calls you are concerned about.
There's also options like uBlock Origin's methods of only whitelisting specific scripts. Much more flexible than NoScript. You can block scripts that are third party and only allow site specific ones fairly easily, without digging deep into the settings.
Bear in mind that your specific combination of installed extensions can also be a unique identifier though.
Holeheadou92984
in reply to wizardbeard • • •maybe
yes
could you explain why it is nealy impossible from only blocking javascript from attaining "local machine operating system + version
"? I don't think this kind of information is relevant for webpage displaying. I dont think webpage will break if we ban js from doing so
that could work I guess when I have enough js knowledge
is it possible to adjust uBlock Origin whitelisting and disallow js that retrieve "local machine operating system + version
" from running?
Does this mean website can see all the extensions I installed?
normalexit
in reply to Holeheadou92984 • • •Some browsers have built in fingerprint resistance techniques you can enable:
support.mozilla.org/en-US/kb/r…
I wouldn't entirely trust it, but enabling this feature in strict mode would tick a few of your listed boxes.
Resist Fingerprinting | Firefox Help
support.mozilla.org