JShelter

Discussion in 'privacy general' started by Sampei Nihira, May 1, 2022.

  1. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,367
    Location:
    Italy
    https://jshelter.org/

    This extension is the only privacy-protecting extension actively developed for chrome-based browsers.
    Some more info:


    https://jshelter.org/fingerprinting/

    There is an excessive and long procedure for reporting bugs:

    https://github.com/polcak/jsrestrictor/issues


    The extension is also available for Firefox.
    But it seems to me that it is more useful in chrome-based browsers.

    With JShelter it is possible to have a randomized fingeprint to the Cover YouTracks test:

    2.jpg

    and a different ID to the test below (obviously if you close/open the browser):

    https://fingerprintjs.com/demo/
     
    Last edited: May 1, 2022
  2. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    I have quickly checked it out, but what is it supposed to do? It didn't seem to break anything so I gues it's not like NoScript?
     
  3. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,367
    Location:
    Italy
    Let me give you an example.
    At the privacy level,uBlock Origin allows you to keep trackers under control although it would be good practice to combine this feature of his with the browser + DNS.
    It would allow like Noscript to keep fingerprinting under control as well,but not all websites run on blocked javascripts.
    JS allows this, with spoofing of some (not all) values subject to fingerprinting by websites.
     
  4. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    I'm not going to lie, I didn't really understand your explanation. I know that NS tries to protect against exploits and ads/trackers but it does this in a dumb way, because it will break most websites from being displayed or functioning correctly. Not a surprise, because it blocks first party scripts. That's why most people choose to use tools like uBlock and Ghostery which mostly block third party scripts. So what does JShelter brings to the table?
     
  5. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    1,155
    Location:
    usa
    With JShelter on, I have issues while trying to post comments not on Disqus but on various web-sites using Disqus app/software for comments.
    With JShelter on, I can't log in to any bank/credit web-sites.
    With JShelter on, I can't change my Avatar/Photo even if I'm able to post comments.
    In short.
    It's a very good and very powerful add-on to protect you against trackers, but it requires too much work/adjustments while dealing with above mentioned issues.
     
  6. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    OK thanks, so in other words, it's almost as dumb as NoScript, so no thanks.
     
  7. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,367
    Location:
    Italy
    My experience is obviously different.
    I access my online banking without any problems.
    Yesterday I purchased a medication and paid by credit card without any problem.

    However, even with Noscript and my New Moon browser I had no problem.
     
  8. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    1,155
    Location:
    usa
    I would not say, "It's a dumb app, but..."
    It's just too much of a hassle to always make some adjustments or just turn off for this/that purpose.
     
  9. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    Yes, that's what I call dumb, this type of tools shouldn't cause such a hassle. There are way smarter ways to protect against browser exploits and tracking.
     
  10. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    1,560
    @zmechys

    Did you tried using one of the built-in JSS levels? Or making a custom one in case a particular protection is causing you issues?

    @Rasheed187

    I recommend reading this if you want to know I little more of the product
    https://jshelter.org/faq/
     
  11. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    OK thanks, seems like it's more focused on protecting against finger printing, which is kinda cool I guess. But for now it's not worth the trouble. Hopefully in the future, browsers like Vivaldi will implement anti-finger printing as already found in Brave, Firefox and I assume DuckDuckGo will also offer this in their upcoming desktop browser for Windows.
     
  12. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Many of us are all for that. Once they refine the optimum way to repel fingerprinting in entirety then that's another positive step.
     
  13. moredhelfinland

    moredhelfinland Registered Member

    Joined:
    Mar 31, 2009
    Posts:
    350
    Location:
    Finland
    I'm using JShelter, tho i had to disable it when doing online banking to pay my bills.
     
  14. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Same thing I sometimes find having to do with NoScript. No biggie but if you forget you think, now what's wrong?
     
  15. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    3,355
    Location:
    Location Unknown
    why not just use Firefox's privacy.resistFingerprinting setting? If need be, you can even add domains to privacy.resistFingerprinting.exemptedDomains for whitelisting.
     
  16. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    1,560
    Well, jshelter has another way with dealing with fingerprint
    https://jshelter.org/farbling/
     
  17. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Interesting read, I covered the whole article.

     
    Last edited: Jun 1, 2022
  18. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    1,155
    Location:
    usa
    Yes, I have tried but it becomes too cumbersome
     
  19. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,367
    Location:
    Italy
    JShelter v. 0.12.2 (June 7, 2023)

     
  20. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,367
    Location:
    Italy
    JShelter v. 0.13 (June 30, 2023)

     
  21. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,367
    Location:
    Italy
  22. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,367
    Location:
    Italy
    JShelter 0.17 (November 03, 2023)

    Changelog:

    • Added support for built-in tweaks for specific domains. The goal is to list several domains that break unnecessarily. Typically, an addition to the list should be well explained and must not lower protection. A nice candidate is WebWorker and the protection of Strict (break) and Remove.
    • Updated translations
    • Improved FPD report based on user feedback:
    • Do not refresh report automatically when tracking callers but introduce an update button so that users refresh when convenient (prevent glitches in the interfaces)
    • Add buttons to hide/show details and fold/unfold groups
    • Do not show traces in bold to better differentiate between API names and traces.
    • Add possibility to forget current traces. Useful when there is a fingerprinting script that activates after some action. The button allows the user to hide the traces triggered in the past and later load only new traces.
    • Add support for signing for Android on AMO, so we needed to increase minimal supported version
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.