Hacker News Reader

Comment by philsnow | Hacker News Reader

Fine, but in addition everything you do should be encrypted end to end as well as you can. Use httpseverywhere. Use privacy badger.

View on HN

Privacy Badger forces you to send the DNT header, making your browser far more vulnerable to fingerprinting. Just use the relevant filter lists in uBlock Origin.

How does DNT make you more vulnerable to fingerprinting? Because there's fewer people that DNT than who don't, or am I missing something else?

Yes, because it's an option you specifically have to set as a user, most people don't bother (or don't know about it), so simply by setting the flag, you're making yourself easier to identify.

You can disable the DNT check, and as far as I can tell, I am not sending a DNT flag at all, despite having Privacy Badger installed.

How does one do this? I found no relevant setting in privacy badger's settings, and even though dnt is disabled in my browser's settings, I'm still sending the dnt header with privacy badger on (after disabling Privacy Badger my browser no longer sends it, so it's definitely Privacy Badger).

Disable the option "Check if sites comply with EFF's Do Not Track policy" in Privacy Badger's settings, that should do it.

I'm on Firefox 57, also using uBlock Origin with every tracking-related filter list (I presume that may make a difference).

According to this page, I have DNT on: https://www.mozilla.org/en-US/firefox/dnt/ (How else can I confirm?)

The settings say that DNT is either always on or on when using tracking protection. So do you have tracking protection off and rely on uBlock instead? (I don't use privacy badger.)

According to that site, I also have DNT enabled, however https://amiunique.org/fp says it is off ("NC" == not set).

I have tracking protection in Firefox set to off, as it uses the same Disconnect.me lists that you can enable in uBlock Origin. I guess Privacy Badger just forces through DNT, as per EFF's stance on the matter. I think it's somewhat counterproductive.

Nonetheless, DNT on/off is absolutely secondary to simply blocking all tracking through uBO and Privacy Badger.

Either NC doesn't mean what you think it means or the website is wrong. It says NC for me too, but I can clearly see the header being sent in both dev tools and in wireshark.

Disabling the option doesn't change a thing for me. DNT is still sent.

Reply on news.ycombinator.com