Egregoros

for the record I'm an advocate for good digital hygiene, and using Tor Browser in 'Safest Mode' and with uBlock Origin.
>> But uBlock Origin changes your browsers fingerprint!

Yes and no. It changes your fingerprint in ways that are not noticeable by anyone but you 98% of the time. For the other 2% of the time (where you access a site that is actively colluding with the tech predators your browser fingerprint matches the average TailsOS user, because TailsOS packs Tor Browser with uBlock BY DEFAULT....

....which is AWESOME! Dear Tor devs @torproject can you see this?

Safest Mode blocks javascript by default but if you drag the NoScript addon back into the toolbar you can enable js for the sites YOU choose....like ur fediverse, etc. This is how Tor Browser was years ago but they made a bad decision to remove the addon from the toolbar so the next generation of privacy conscious ppl would find Tor difficult to use. To enable js without NoScript a user needs to RESET their browser. Ie. Close the browser and lose ALL their tabs and start over. When they want to stop js (for ALL sites) they need to restart the browser YET AGAIN. Totally unusable.

Why? They take money from entities that dont want the average person to use Tor. They want Tor to be used only by 5% of users who a most adament in protecting their privacy. Or for Tor to be used in a country that blocks dodgy websites designed to intoxicate and brainwash the youth of that country, eg. fecesbook. If Tor were to become too popular it would end a bunch of golden handshakes, and attacks that the predator class exploit. So they had to make it a little bit crap by default.

@nixCraft @arya@social.linux.pizza

@torproject @nixCraft @arya@social.linux.pizza

I recommend going a step further and blocking common C.A.G.E.M.A.F.O.A. servers that have been able to dupe web developers into including snitches into their sites under the guise of convenience. Block information leaking to geewwgle, cloudflare, and scam'azon by blocking their Content Delivery Networks (CDNs) and video sites, that some developers try to embed into their webpages.

Go to the uBlockOrigin settings and 'My filters' tab, then copy/paste the following domains, one per line, into the text area and click 'Apply changes' to block them:

_________________________________

google.com # served by google
googleapis.com
googletagmanager.com
gstatic.com
youtube.com
youtu.be
ytimg.com
youtube-nocookie.com
googleusercontent.com #____________
cloudflare.com # cdnjs.* cloudflare
jsdelivr.net
fontawesome.com
vimeo.com
vimeocdn.com
odysee.com
bitchute.com
rumble.com
twitter.com
x.com
licensebuttons.net
paypalobjects.com
shields.io
substack.com
datatables.net
sstatic.net
imgur.com
unpkg.com
creativecommons.org #______________
typekit.com # use.* akamai ________
githubusercontent.com # micro$haft
github.com #_______________________
facebook.com
fbcdn.net #________________________
cloudfront.net # scam'azon
substackcdn.com #__________________
paypal.com # fastly

If you have a suggestion for another domain to block I'd be intersted to know about it, but I check every website I visit for dodgy third-party requests and have not seen more than these. The rumble one is a guess by me....dont beleive ive ever seen a rumble embed, maybe a couple years ago just b4 the browser killed itself. @p @silverpill @sohrab @gabriel @caohuak

@torproject @nixCraft @p @silverpill @sohrab @gabriel @caohuak

NEW domain to add the above uBlock block list, recently fonts.bunny.net was turned over to amazon. if you wish to follow my block list it should now read as:

-----

google.com # served by google
googleapis.com
googletagmanager.com
gstatic.com
youtube.com
youtu.be
ytimg.com
youtube-nocookie.com
googleusercontent.com #____________
cloudflare.com # cdnjs.* cloudflare
jsdelivr.net
fontawesome.com
vimeo.com
vimeocdn.com
odysee.com
bitchute.com
rumble.com
twitter.com
x.com
licensebuttons.net
paypalobjects.com
shields.io
substack.com
datatables.net
sstatic.net
imgur.com
unpkg.com
creativecommons.org #______________
typekit.com # use.* akamai ________
githubusercontent.com # micro$haft
github.com #_______________________
facebook.com
fbcdn.net #________________________
cloudfront.net # scam'azon
substackcdn.com
fonts.bunny.net #__________________
paypal.com # fastly

@frogzone @torproject @nixCraft @silverpill @sohrab @gabriel @caohuak Seems like it'd be easier to just have a look at the ASNs for who owns the address space the IP resolves to than to maintain a list like this. Easier than it looks, you know, you can just download the NRO delegated stats DB, it's a flat text file, and you can correlate it with publicly available whois/RDAP. If you cache it and do the CIDR math (`prips` has a way to ask for inclusion, I *think*), you can just collect this information passively via dnsmasq.

That having been said, like, I'm not sure what this list is intended for, like, what the purpose is or how it's supposed to accomplish that purpose.
worldwideuseast1.png

@p @sohrab @nixCraft @torproject @silverpill @caohuak @gabriel
>> "Seems like it'd be easier to just have a look at the ASNs for who owns the address space the IP resolves to"

Yes and no, by nipping the requests by domain name we avoid the DNS leak, also I don't believe uBlock is able to block based on ip address ranges, tho I may be mistaken, the third limitation is by scanning all the IP address ranges it might cause reponsiveness/slowness issues.

>> "what the purpose"

Block the most common extortion methods that the CAGEMAFOA have been able to suck web developers into adopting, under the false appeal and false economy of supposed load times.... and doing so in the most effective and efficient way possible.