Hacker News new | ask | show | jobs
by tcd 2272 days ago
The web shouldn't block ads, it should block JS entirely. There should be a 'global' permission system (similar to Android) that allows me to control exactly what information websites are allowed to access from my browser.

For example, I want to disable WebRTC as it can be used to collect my IP address, or disable WebGPU APIs or anything that can be used to finger print me.

JS has far, far, far too much broad access to information that might seem mundane but can be used to profile a user.

Android is the same - you can get the entire list of installed packages on the system and various other pieces of information to build a unique, persistable tracking ID.

There's also a lack of accountability: What information is being sent to what servers? I want a detailed JSON formatted breakdown of EVERY single piece of data that is being sent from my device.

I should be able to block anything that is outside my own determined comfort zone.

But most OS' just make requests to US IP's without much thought now - just turn on Windows 10 in a VM and watch as it sends so many requests with no insight into the data, which many companies (including Google) don't tell you about.

Ask me about a recent GDPR request to Google which I just got a generic response about (and they didn't action my request to delete information, so now I need to complain to the regulator because it was also late).

So yes, blocking ALL tracking by default is sensible.

1 comments

Do you hold your mobile native apps to the same standard? As a former iOS developer I guarantee you there's a lot more of your data getting collected from those than you'd think and you can't do anything about it.