This is actually much worse for privacy than leaving everything stock, because a site can tell you aren’t downloading or running any javascript, and that immediately puts you in an extremely tiny bucket of people it needs to differentiate from, making any differences visible via IP/TCP/TLS/HTML/CSS much more unique.
And yes, fingerprinting is possible with just HTML and/or CSS… I would argue even moreso without JS.
Fingerprinting can usually identify you uniquely. So even if only two people in the world were using NoScript, it would still be more private than getting fingerprinted.
Edit: btw I’m talking about Javascript fingerprinting. Other methods like HTML and CSS are far less effective and rarely seen in the wild.
FYI if you are talking about HTML and CSS fingerprinting, I have never seen them used in the wild, and they are trivially detectable (for example a bunch of hidden :hover elements on the page), so Tor Browser would add defenses if they did start appearing in the wild.
>connects to site with NoScript
>nothing loads
>checkmate 😎
Like most of the rest of the internets.
Technically you’re referring to the web
It’s actually more like a series of tubes…
This is actually much worse for privacy than leaving everything stock, because a site can tell you aren’t downloading or running any javascript, and that immediately puts you in an extremely tiny bucket of people it needs to differentiate from, making any differences visible via IP/TCP/TLS/HTML/CSS much more unique.
And yes, fingerprinting is possible with just HTML and/or CSS… I would argue even moreso without JS.
Fingerprinting can usually identify you uniquely. So even if only two people in the world were using NoScript, it would still be more private than getting fingerprinted.
Edit: btw I’m talking about Javascript fingerprinting. Other methods like HTML and CSS are far less effective and rarely seen in the wild.
IMO “more private” is pointless when you’re still unique either way
If you use Tor + NoScript, you won’t be unique. You’ll blend in with the other Tor + NoScript users, of which there’s probably hundreds
There are literally dozens of us!
Dozens!!!
Hard disagree, there are still ways to uniquely fingerprint you.
FYI if you are talking about HTML and CSS fingerprinting, I have never seen them used in the wild, and they are trivially detectable (for example a bunch of hidden :hover elements on the page), so Tor Browser would add defenses if they did start appearing in the wild.
Pray tell