Hacker News new | ask | show | jobs
by seiji 4650 days ago
Run Disconnect instead of Ghostery. Ghostery had a big fad following a while ago, but it's not actually good for you. Disconnect is much better.

(and stop running NoScript (nobody is designing sites to work for you), just run with Click to Plugin enabled, Disconnect, and ABP)

I've seen a lot of these "I can't see the article until I disable my 40 extensions" complaints recently, but they all work fine with my combination of Disconnect and ABP.

4 comments

Thanks. I will try Disconnect. [Edited: I'm curious to know why you say Ghostery isn't good for users, and why Disconnect is better?]

To clarify, I wasn't complaining specifically about this article but in general while browsing the web.

Click to Plugin seems to be a Safari plugin, while I am a Firefox/Chrome user. As for ditching NotScript altogether, I'm not sure I'm ready for that yet, especially when I see sites that seem to be loading scripts from an dozen or two domains in addition to their own!

My paranoia comes with a (discomfort) cost attached, I know.

Ghostery might not be as bad as the headlines suggest, but their tracking seems to be opt-out rather than opt-in:

https://news.ycombinator.com/item?id=5897682

http://lifehacker.com/ad-blocking-extension-ghostery-actuall...

http://venturebeat.com/2012/07/31/ghostery-a-web-tracking-bl...

A few months ago, Disconnect's founder (byoogle) spoke about why Disconnect is better:

https://news.ycombinator.com/item?id=5898165

Disclaimer: I used Ghostery for a long time and liked it, but now use Disconnect.

Ghostery's anonymized data sharing is opt-in.

Source: current, updated Ghostery user.

Thank you. I appreciate the correction.
Oddly, I can see it just fine with JavaScript disabled. I do not use NoScript (I use Opera 12 and whitelist sites to allow JS or not via per site settings[1]). I also have Disqus added to my hosts file (but disabling JS will have the same effect). I would guess perhaps NoScript decides to partially allow some scripts and not others, making for chaos? That just seems like a mess waiting to happen that no developer can 100% predict. No JS or all JS is much easier, but half blocking is not so much when there's dependencies.

However, I realize when sites fail (re-enable JS) and adjust accordingly as anyone that does such things should if they're blocking content (though I'm used to adjusting since I've been using a browser with a minority user base for years). Alternatively, view it via Google cache search (and add strip=1 to the end to remove all images and JS) and run it through readability. While I would prefer all sites to not assume, that's not going to happen and comes down to if I care enough to work around to see the site content or just move along and deem it not worth it.

[1] http://help.opera.com/Windows/12.10/en/sitepreferences.html

I only use Noscript, and I can view the content.

I primarily use NoScript because it does a really good job of blocking modern popups.

I use NoScript because essentially every browser exploit in the last decade has had javascript as a necessary component. Running the minimum amount of javascript protects against even zero-day attacks.

I say web developers who put their convenience ahead of my security are bastards.

> I use Opera 12 and whitelist sites to allow JS or not via per site settings

May I ask how to arrive at what 3rd party domains need to be whitelisted for a site to load properly?

I block everything or not (if I site has that much stuff, I probably don't want anything loading from it since it's not just third parties that could be problematic as the site probably performs like crap with local stuff too). If I don't trust a certain third party, I just add it to my hosts file as it's probably common on a lot of sites.

Finding them involves using Opera Dragonfly, Firebug in Firefox or Live HTTP headers a Firefox Addon (or whatever similar in your browser of choice). Granted that's not easy for everyone to do, but I think most on HN could do that if they wished. Though that's what works for me and I'm just sharing in response to your request :)

Too late to edit my previous post, but if you would like to see my host file list, I can paste it somewhere. Some of it is from other lists and quite a bit is things I add.
but it's not actually good for you

[citation needed]

>it's not actually good for you.

Can you elaborate? As in it decreases your privacy because it makes your browser uniquely-identifiable? Or something else...