TheJollyRoger has quit [Ping timeout: 268 seconds]
TheJollyRoger has joined #spectrum
nicoo has quit [Remote host closed the connection]
nicoo has joined #spectrum
<Robotic_Victory>
my primacy interest is in privacy. a thought that i've been having is that we can't be private at all in linux, due to the ease of fingerprinting us. i can have a different browser profile or even unrelated browsers for various interests, but my font configuration and gl drivers (which even leak my distribution and compiler version) still serve to identify me.
<Robotic_Victory>
tor browser and tails take the approach of making every user look exactly like every other user. they all have the same fingerprint, so there's no way to tell one user from another if you're on a vpn.
<Robotic_Victory>
to me, this says i need to have isolated browsing profiles that run chrome on windows 10 in virtual machines. then you disappear into the crowd.
<Robotic_Victory>
ideally, we could hide the windows 10 interface and simply show the application windows in the host.
<samueldr>
*might* be possible through "seamless" RDP...
<samueldr>
(not sure where this falls in relation to spectrum though)
<v0idifyy>
i like the poisoning approach: change the fingerprint constantly
<Robotic_Victory>
i prefer poisoning as a long term strategy, but that requires rewriting browsers.
<v0idifyy>
s/rewriting/patching
<V>
randomising your fingerprint works against you unless everyone does it
<V>
because then you are fingerprintable on the meta level
<v0idifyy>
how?
<v0idifyy>
i don't know a lot about this so take it with a grain of salt
<V>
anonymity is like cryptography. if you don't understand it intimately it's very easy to do something that seems good but is actually exposing yourself
<V>
if you are in a room of people, connected to a wifi network, and you are the only person who is randomising their mac address, anyone who is monitoring that network can go "ah, yes, this set of connections behave in an anomalous manner that are all consistent" and can fingerprint you like so
<V>
the same goes for screwing with your user agent, http headers, language, etc
<V>
it's why I would recommend against using e.g. privacy possum