/g/ - Technology

install openbsd

[Make a Post]
[X]





Anti-JavaScript Crusade Nanonymous No.5846 [D][U][F][S][L][A][C] >>5849 >>5862 >>5971
File: 3d2525c324a98d9900348ee123470f87c9236af026afaaae8bee2f169f669b30.jpg (dl) (16.76 KiB)
What are some sites that don't use JavaScript (or at least don't require it for full functionality)?

I'm thinking sites/software like:
>SearX (in general, ie searx.info)
>NanoChan (ayyy lmao)
>Elude.in (SquirrelMail)
>Wikipedia/Wiktionary/Encyclopedia Dramatica/InstallGentoo Wiki/Arch Linux Wiki (MediaWiki)

There are addon's to disable JS, see:
>NoScript (not very good)
>uBlock Origin (an adblocker, best to just use it as such)
>uMatrix (the best option, but use in conjunction with uBlock for best results)

What about shopping sites specifically?
Sites like Amazon and Ebay both require you turn on/allow loads of liquid turd in uMatrix before even basic functionality begins to emerge.

Answers like "just use Craigslist" or "just go to a brick and mortar store lmao" don't count.
Keep it real!


Nanonymous No.5848 [D] >>5850
It's better to disable javascript in about:config or to remove any mention of javascript from the source code so that it can't be exploited.

Nanonymous No.5849 [D][U][F] >>5850 >>5863 >>5864
File: e5ed85f5843446555be41ceec79c19632ad3219957f874ceb6712dbc5706db5b.jpg (dl) (67.69 KiB)
>>5846
I've found SourceHut (sr.ht) to be pretty good in this regard vs Gitlab. It has been intentionally designed to not require javascript, but still have a large feature set, CI etc.

Invidious doesn't require JS either.

> >uMatrix (the best option, but use in conjunction with uBlock for best results)
Why do you say this? Why isn't uMatrix enough?

>Answers like "just use Craigslist" or "just go to a brick and mortar store lmao" don't count. Keep it real!
I don't think you should rule this out if you have strong beliefs in this area. Going to a brick-and-mortar store and paying with cash can be a good way of evading surveillance. Opting out of a broken system, refusing to jump through hoops at all is absolutely a solution.

Take RMS for example. Rather than attempt to get working FOSS software on a mobile phone, he refuses to carry a mobile phone at all - recognizing that the entire concept is a bad one. Abstinence is a legitimate choice! If you don't want to use JS then don't - it's up to you!

Nanonymous No.5850 [D] >>5904 >>6612
>>5848
Fair point, but this precludes JS being easily enabled for sites that do require it, in a practical sense.
With uMatrix, you could have JS enabled for Amazon, but disabled for SearX.

>>5849
>Invidious
I should have added that to the OP, derp.
Individous is excellent, I recommend setting it as the "yt" keyword in your browser, and using something like Redirector to auto-change YouTube links.
Another one to mention is "old.reddit.com".

>Why isn't uMatrix enough?
uMatrix blocks entire elements and/or domains, not ads specifically.
Sometimes you have to enable a bunch of stuff, and the ads show up. This is my understanding at least, I could be wrong.
In fact, I'll disable uBlock and see if I notice any difference.

>Ruling out brick and mortar etc
It is a choice, but not an especially practical one.
Finding stuff locally, usually involves calling the business or searching their (almost always JS addled) website to see if the item is in stock.
The only other option is to go to each store in person, which is both time intensive, and requires transport that could be great distances away depending on where you live.

Nanonymous No.5855 [D] >>5856 >>5861
Make a VM, install whatever you want in it and use it solely for Amazon purchases.

Nanonymous No.5856 [D] >>5860
>>5855
Why would you argue for buying anything from amazon? Shill or not, amazon is one of the most cancerous corporations out there.

Nanonymous No.5858 [D] >>5859 >>5861
email:

Tor and no javascript (squirrelmail)
http://secmailw453j7piv.onion/ https://secmail.pro
http://mail2tor2zyjdctd.onion/
Tor and no javascript to register, use mail client to receive and send messages
http://cockmailwwfvrtqj.onion/ https://cock.li

Nanonymous No.5859 [D] >>5861
>>5858
http://eludemaillhqfkh5.onion/

Nanonymous No.5860 [D] >>5861
>>5856

The OP was asking about buying something from amazon, ebay and the like. Maybe he wants a book or an item he can't find anywhere, if he doesn't want JS he can use a VM to contain it.

Of course I would also suggest avoiding amazon, or even paypal, but sometimes they are a necessary evil.

Nanonymous No.5861 [D] >>5873
>>5855
Yeah that's an option I suppose, QubesOS tier. Not so good if you have a low performance box though.

>>5858 >>5859
Elude.in (as noted in OP) gets a thumbs up.
There's also: https://www.paranoid.email

>>5860
I'm wondering about JS-less shopping sites though, no matter how niche (as long they are above board, and not some silk road BS).

Nanonymous No.5862 [D][U][F] >>5865
File: 41a18344b4315bf8ae64945f44891bdab0d361fdd01d628973ae80b5a4066cd3.jpg (dl) (14.21 KiB)
>>5846
>What are some sites that don't use JavaScript
Any gopherhole. The past is the future. Get with it.
>don't use JavaScript (or at least don't require it for full functionality)?
>Wikipedia
Did Wikipedia recently switch to using MathML for mathematical expressions? For a long time, math was utterly broken in Wikipedia articles if you had js disabled, but it looks OK now on the ones I just tried.

Nanonymous No.5863 [D] >>5864
>>5849
>I've found SourceHut (sr.ht) to be pretty good in this regard vs Gitlab. It has been intentionally designed to not require javascript, but still have a large feature set, CI etc.

Seems it is a paid service. I don't blame them, but that puts them in a different arena almost vs GitLab/Hub.

Nanonymous No.5864 [D][U][F] >>5866
File: 13163064c6dd7576b88f2b2824afa2e99998889b8bc6738d13a01192806d615c.png (dl) (53.66 KiB)
>>5863
>Seems it is a paid service.
>Welcome to sourcehut! This is the open source software suite for managing your software development projects that you've been waiting for.
>100% free and open source software
>sr.ht is a hosted instance of sourcehut provided for your convenience.
Yes, >>5849 should have linked sourcehut.org, not sr.ht. Fuck him in the ass to teach him a lesson. Quantity of lube is up 2 u.

Nanonymous No.5865 [D]
>>5862
>Any gopherhole. The past is the future. Get with it.

Do Gopher shopping sites exist? lol
But yes, Gopher.

How much JS do I2P sites generally use?

Nanonymous No.5866 [D]
>>5864
Um, what?
sourcehut.org still has a "Pricing" tab.

>$2/month or $20/year for "Amateur Hackers"

Nanonymous No.5867 [D]
>SourceHut
The name is pretty lame. I much preferred when it was called Sir Hat.

Nanonymous No.5868 [D] >>5914
>secmail
There is no IMAP or POP support.
<We dont belive in God

Nanonymous No.5869 [D] >>5874
Ok, unironically how do you guys use Gopher (in Tor Browser or at all)?

Nanonymous No.5870 [D]
Use torsocks with your gopher client.

Nanonymous No.5871 [D] >>5872
Note that if you aren't connecting to a hidden service gopherhole, the exit node can MITM your traffic since gopherholes do not have encryption.

Nanonymous No.5872 [D] >>5879
>>5871
I read something about gopher encryption though, somewhere.
Whats that about?

Nanonymous No.5873 [D]
>>5861

You don't necessarily need qubes or a high-end box. You can start a live cd using virtualbox, or just make a live cd and boot into it. You shop from amazon or whatever, then you reboot.

(Of course this won't work for HS shops, if that's in your mind)

Nanonymous No.5874 [D]
>>5869
I have heard that Parrot Linux has an anonsurf feature. Not sure if that works with all applications, but I guess it's worth researching.

Nanonymous No.5879 [D]
>>5872
>I read something about gopher encryption though, somewhere.
Gopher does not support encryption. People have jerry rigged encrypted proxies for their gopherholes though, but there is not anything standard. One such solution is just to host your gopherhole as a hidden service and you get encryption for free from the Tor protocol.

Nanonymous No.5888 [D]
>using firefox
Pathetic.

Nanonymous No.5904 [D]
>>5850
>what are browser profiles

Nanonymous No.5907 [D] >>5920 >>9192 >>9193
I found this shit to submit a page to google translate for you.
It's useful because if you go directly to https://translate.google.com/ it's basically a blank page without JS

Nanonymous No.5908 [D] >>9192 >>9193
lmao forgot link
http://itools.com/tool/google-translate-web-page-translator

Nanonymous No.5909 [D]
Tor Browser is based on Firefox

Nanonymous No.5914 [D]
>>5868
mail2tor and cock.li support those protocols

Nanonymous No.5919 [D] >>5955
you can use google news without javascript, you just cannot search for any news articles and you have to manually click the redirect link when it pops up.

just start browsing around using tor on the safest setting to see what sites function like without javascript. I find that i really only need to turn javascript on once in a while during normal news reading and stuff like that. most of your news sites can function pretty well without javascript.

ion fact some sites like the net york times function better when you use them without javascript because it gets rid of the paywall crap sometimes.

Nanonymous No.5920 [D] >>5965
>>5907
>https://translate.google.com/
The mobile site works without JS.
https://translate.google.com/m

Nanonymous No.5921 [D] >>5922
You can get some sites to work by disabling CSS.
In Firefox: View -> Page Style -> No Style or alt+v+y+n

Nanonymous No.5922 [D]
>>5921
Instead you could just use uMatrix to have more fine grained control over the css you are using.

Nanonymous No.5955 [D] >>5959 >>5961
>>5919
Why not use Drudge at that point?

>Firefox pathetic
Yes. Ungoogled-Chromium is way better in every way possible (except adding extensions is currently a pain, but theres talk of an add-on for that) but "LMFAO IT'S A STUDENT PROJECT WAY BEHIND UPSTREAM!!!!!!!!!!!!!!!" and "ONLY USE TOR WITH TOR BROWSER ITS SO INCOMPREHENSIBLY BETTER THAN ANY OTHER SHITTY BROWSER YOU COULD USE OR SETUP IN TERMS OF SECURITY SO DON'T BOTHER!!!!!".

Nanonymous No.5959 [D]
>>5955
Or anything using qtwebengine. Everything Google is stripped from it.

Nanonymous No.5961 [D] >>5966 >>5967 >>6029 >>6030
>>5955
yes it is and here is why from a tor dev :

"
When you use Tor Browser normally, it does lots lots of intelligent stuff to keep you safe. Tor Browser is a lot more than Firefox with some preconfigured security settings and some addons.

If in some tabs you are visiting Facebook (perhaps even with your real daily account) and in some other tabs you on Wikipedia researching an accurate history of your abusive government, the traffic and the local state from the Facebook tabs will not touch the traffic or state from the Wikipedia tabs. The traffic from Facebook tabs regardless of destination domain will not use the same circuits (paths) through the Tor network as traffic from Wikipedia tabs, not even if they use the same ad network or content delivery network. You can never recreate this behavior in any other browser without modifying its source code and recompiling it. This is beyond simple configuration options.

If you connect to a VPN over Tor, this traffic separation goes away completely. You build a single circuit through the Tor network, and over this circuit you connect to your VPN. All your Facebook and Wikipedia traffic travels the same path right next to each other. If you tunnel other things over this VPN connection, those things are right there too. All the SSH traffic, IRC traffic, IMAP, SMTP, or OS update traffic that you generate through this tunnel is right next to each other. Worse, depending on how you managed to get this VPN-over-Tor setup working, you may have even broken the local state separation of Tor Browser. If any of this traffic is identifying of you, you've potentially tainted all of your traffic."

http://zfob4nth675763zthpij33iq4pz5q4qthr3gydih4qbdiwtypr2e3bqd.onion/p/mRikAa4h.html

do not take my word for it, this is one of the people who codes tor and the browser.

Nanonymous No.5962 [D]
https://2019.www.torproject.org/projects/torbrowser/design/


Nanonymous No.5965 [D]
>>5920
oh, well that's better then. arigatou

Nanonymous No.5966 [D]
>>5961

And actually this can be a good thing if you want to obscure tor traffic from time correlation attacks.

Nanonymous No.5967 [D]
>>5961
>You can never recreate this behavior in any other browser without modifying its source code and recompiling it.
Links 2.18 and correct Tor config.

Nanonymous No.5969 [D] >>6034
Can you post a link to the config?

Nanonymous No.5971 [D] >>6028 >>6040
>>5846
>There are addon's to disable JS, see:
>proceeds to list addons made in javascript

Nanonymous No.6028 [D] >>6039
>>5971

The problem with JavaScript is not it as a language, it's how it used.

If some local app is written JS, that's less bad.
If some web site says my browser has to do all the heavy lifting (whilst also closed source and trying to glean info) THEN THAT'S BS!!!!!!!!!!!!!!!

Name some good options that aren't written in JS, and don't say "muh about:config"!

Nanonymous No.6029 [D][U][F]
File: a92fe63dd39f9254a3906d373f29817a7c5a1dae498ab4e020a1dacc779adfd6.png (dl) (13.46 KiB)
>>5961

Yes, we know it's incomprehensibly giganticlymegagigamassively better than the alternatives, that's not the point (!!!!) and why we sit here using i!

What that does not mean is the same functionality can't be thrown into a a vastly superior browser (ie ungoogled-chromium!!!!!!!!!!!!!!!!!!

Nanonymous No.6030 [D] >>6039
>>5961

MOREOVER!!!!!!!!!!!!!!!!!!!!!!:
That site appears to be basically "LMFAO VPNs ARE SHIT USE TOR" - wherever possible, yes, BUTT WHAT ABOUT THOSE 67 GAGILLION SITES WHERE YOU HAVE TO PASS A CAPCHA OR SOME BULLSHIT!?!?!?!?!?!?
WHAT THE FUCK THEN? YEAH YOU MIGHT GET A GODAMN REAL-ASS TOR EXIT NODE THAT WASN'T ABUSED BY SOMEONE AFTER 100 QUAD TRIES, BUT FUCK MAN, WTF!

VPNs HAVE THERE PLACE!
Now granted, this is mostly the issue of the ignorant behavior of the PCNPC populace "lmao don't use Tor that's just illegal stuff" that has permeated throughout the MSM (and many in the alt media are guilty of this ignorant behavior as well), BUT TOR DON'T WORK IN THOSE CASES!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Nanonymous No.6031 [D]
fuck googlag captchas btw

Nanonymous No.6034 [D] >>6150
>>5969
Do this:
https://nanochanqwrwtmamtnhkfwbbcducc4i62ciss4byo6f3an5qdkhjngid.onion/g/4669.html

Then add the bellow to ~/.links/links.cfg

socks_proxy "127.0.0.1:9050"
only_proxies 1
fake_firefox 1
ipv6.address_preference 3
save_url_history 0
async_dns 0
format_cache_size 0
memory_cache_size 0
image_cache_size 0
font_cache_size 0

And this to ~/.links/html.cfg

html_hard_assume 1
html_auto_refresh 0
html_frames 0

Add a alias to your ~/.profile or ~/.kshrc

alias links="links -g -no-connect"


That's it.

Nanonymous No.6039 [D] >>6040
>>6028
>Name some good options that aren't written in JS, and don't say "muh about:config"!
about:config works perfectly fine. use a separate browser profile with a hotkey to launch it in the rare cases you need JS
>>6030
>MOREOVER!!!!!!!!!!!!!!!!!!!!!!: That site appears to be basically "LMFAO VPNs ARE SHIT USE TOR" - wherever possible, yes, BUTT WHAT ABOUT THOSE 67 GAGILLION SITES WHERE YOU HAVE TO PASS A CAPCHA OR SOME BULLSHIT!?!?!?!?!?!?
Are you talking about cuckflare? Those captchas can be bypassed by using Tor Browser or emulating it (by using the same User Agent as it and other headers may need to be the same).
>VPNs HAVE THERE PLACE!
Yes, they are traditionally used to access your work network from home. Which wasn't a good idea either. So actually no lol.

Nanonymous No.6040 [D] >>6041 >>6107
>>5971
Who the fuck cares if uMatrix is written in javascript, do even understand why it's better to block javascript on websites or do you do it just cause people told you?
>>6039
>they are traditionally used to access your work network from home. Which wasn't a good idea either. So actually no lol.
Do you download big files and torrent via tor faggot?
No you use a VPN for those things. If you don't have a trusted vpn then sucks to be you i guess.

Nanonymous No.6041 [D]
>>6040
fix
>or do you do it just cause people told you that muh javascript bad?
(and you follow like a sheep)

Nanonymous No.6101 [D] >>6107
>use a separate browser profile with a hotkey to launch it in the rare cases you need JS

Interesting idea, what about other elements though?
It would seem uMatrix would still be better there.
Also, what if you only need to enable some (not all) JS? about:config can't do that!!

>Are you talking about cuckflare? Those captchas can be bypassed by using Tor Browser or emulating it (by using the same User Agent as it and other headers may need to be the same).

What?
Why would you emulate Tor Browser if you are already using Tor Browser????
>User agents
I don't think cuckflare and goolag captchas give much of a shit about your user agent, so much as your IP (exit node).
They don't allow Tor, they've only forgotten to ban a few exit nodes (most if not all are actually banned).

Nanonymous No.6107 [D][U][F] >>6111 >>6216 >>6651
File: 37031242afeafd985589baeaeaa2ef319f9431b9471128c8410369093708ba6e.png (dl) (428.49 KiB)
>>6040
>using a VPN to download shit
fuck off to reddit
>>6101
>Also, what if you only need to enable some (not all) JS?
You mean like that /pol/nigger tier placebo shit where you add random scripts to your blocklist and domains to your /etc/hosts? That's like hand picking a few molecules of air and removing the ones you don't like from that selection.
>Why would you emulate Tor Browser if you are already using Tor Browser????
I don't use Tor Browser with Tor. Yes I pay in that I'm more identifiable, but that doesn't matter for me. I use Tor on the principle that IP addresses are none of the website's fucking business. If there was a secure unidentifable browser, I would use it, but Tor Browser like any modern software is just a piece of shit work in progress and will always be since the protocols are garbage.
>I don't think cuckflare and goolag captchas give much of a shit about your user agent
They do. Jesus christ why do I have to explain this 100 times on here and 8gag if there are only 3 users?
general.useragent.override;Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0
and you will never see "ONE MORE STEP | ATTENTION REQUIRED XDDD" again
Also some palememe versions used a very uncommon Accept header which had to be overriden as well.
Now go look up what a WAF is, why it's fucking stupid, and learn that _that_ is what cuckflare is. Probably any blackhat/defcon talks ever made on the subject would be a good starting point, as anything else available on the web is just corporate retards and redditors saying WAFs are good cuz muh retarded arguments.

Nanonymous No.6111 [D] >>6150 >>6184 >>6192
>>6107
>and you will never see "ONE MORE STEP | ATTENTION REQUIRED XDDD" again
This is not true. Cloudflare blocks public Tor nodes. Just changing the user agent won't do anything if the exit node is connecting to a server using cloudflare.
I suspect they block common user agents used for crawling, such as Wget, Aria2 and cURL. But that's another thing and won't solve the Tor blocking issue.
If you want to bypass cloudflare while still using Tor to directly connect, basically the only way is to use Bridges. Or ask for the server admin to disable Tor blocking in the cloudflare settings (or allow only GET, not POST).

Nanonymous No.6150 [D] >>6154 >>6184 >>6192
>>6034
this is retarded. your Links won't get different Tor circuit for each site that you visit

>>6111
>If you want to bypass cloudflare while still using Tor to directly connect, basically the only way is to use Bridges.
bridges are guard nodes, they won't help in anything, cloudflare gets your exit node, which are public no matter if you use bridges or not

Nanonymous No.6154 [D]
>>6150
>Links won't get different Tor circuit for each site that you visit
It will, because of torrc isolation flags. Read the thread linked.
Also, to make sure, I add this to ~/.config/i3/config:

bindsym F2 exec "/usr/local/bin/links -g -no-connect"
bindsym F3 exec doas pkill -SIGHUP tor

So each time I access something and I want to be sure the exit rotated, I just open a new Links (using F2), restart Tor (using F3) and enter the url.

Nanonymous No.6171 [D] >>6173 >>6192
If I see a site blocked by clownflare, I siimply don't visit it

i might get into the trouble to use some vpn after tor if it's something i really need to see but usually it's not

Nanonymous No.6173 [D] >>6184
>>6171
I just put "web.archive.org/save/" before the url and fuck it. It's easier than doing anything else.

Nanonymous No.6184 [D] >>6192
>>6111
Audibly kek'd whilst reading, lmao, good post.

>hand picking a few molecules of air and removing the ones you don't like from that selection.

No.
If you need a JS site to work, it would be better to not allow JS from say, I don't know, Google Anal-ytics.
If you have to run JS, might as well run as little as possible.
This is something many people in Open Source seem to not get about the Stallmanist and secure/anonymity side of things, they think it's an all-or-nothing venture
Even when it clearly fucking isn't, it's just a percentage of how fucked or unfucked your system is.
Your machine might have some obscure CPU backdoor, but at least your OS isn't phoning home multiple times per minute.

>I don't use Tor Browser with Tor.
>I use Tor on the principle that IP addresses are none of the website's fucking business.
>Tor Browser is just a piece of shit

Tor Browser is okay, just not great (muh Firefox).
Many will lose their shit though if you use Tor without Tor Browser, but I can understand using something else.

>useragents solve everything

I'm leaning more towards >>6111 and >>6150 on that issue.

>6171
Works if you HAVE A VPN IN THE FIRST FUDGE BUCKLING PLACE REEEEEEEEEEEEEEEEEEEEEEEEEEEEE

>>6173
Good idea IF IT'S JUST AN TEXT PIECE!!!!!!!!!
WHAT IF IT'S A GODAMN WEBAPP SUCKERY!?!??!?!?!
HUH? WHAT THEN!?!??!?!!?!?!?!??!?!?! REEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE

Nanonymous No.6185 [D]
>In fact, I'll disable uBlock and see if I notice any difference.

There is a difference, and it's worse, ended up re-enabling uBlock to block the ads.

Nanonymous No.6192 [D] >>6199 >>6211 >>6623
>>6111
>This is not true. Cloudflare blocks public Tor nodes. Just changing the user agent won't do anything if the exit node is connecting to a server using cloudflare.
Did you even read what I posted? Cuckflare is a WAF. WAFs do stupid fuzzy shit that doesn't necessarily have to make sense, such as blocking an IP address by default unless it has a special user agent.
>I suspect they block common user agents used for crawling, such as Wget, Aria2 and cURL. But that's another thing and won't solve the Tor blocking issue.
Yes, that's _ANOTHER THING_.
>>6171
>i might get into the trouble to use some vpn after tor if it's something i really need to see but usually it's not
just copy Tor Browser's headers retard
>>6184
>This is something many people in Open Source seem to not get about the Stallmanist and secure/anonymity side of things, they think it's an all-or-nothing venture
You dickfuck, in the case of web, it literally is all or nothing. Why do you block Google Analytics? Because you don't want to get tracked? We're talking about opening a single browser instance with fresh state to login to bank or email for 5 minutes, then clear all state (ctrl+shift+delete) after. If a website you visit wants to track you, they fucking will (via fingerprinting), because they can simply serve whatever JS to you they want, it doesn't have to be on a 3rd party domain with a scary name that you can conveniently blacklist. This is a basic concept of computing, which _YOU_ don't understand. The only "solution" is Tor Browser. As I said, you're literally LARPing by picking out domains you think are bad and blocking them.
>>useragents solve everything
>I'm leaning more towards >>6111 and >>6150 on that issue.
WTF are you talking about. Tor Browser doesn't get cuckflare captchas. So obviously copying the headers of Tor Browser is what's needed to get through the WAF. I've been doing this for over a year and I see the captcha only once a month instead of 100x per day as it used to be.

Nanonymous No.6199 [D] >>6211
>>6192
>Tor Browser doesn't get cuckflare captchas
Of course it does. Stop being retarded. I'm using TBB headers right now and still get cloudflare block in some websites.
>I see the captcha only once a month instead of 100x per day
That doesn't mean they don't block you. Tor community complained with them and they "relexed" their rules. But Tor is still blocked on default cloudflare config (you can disable).

Nanonymous No.6203 [D]
>in some websites.
some. whereas before it was every two websites. they have different modes. in the default mode the bypass works. the rest of your post just contradicts itself so whatever...

Nanonymous No.6211 [D]
To solve the cuckflare offtopic, >>6192 post a list of websites in which yur method works and >>6199 post a list of websites in which the method doesn't work, then compare.

Nanonymous No.6216 [D] >>6217 >>6230
>>6107
>general.useragent.override

That doesn't even exist in Tor Browser.

Nanonymous No.6217 [D]
>>6216
It doesn't exist in FFX by default either, but it works if you create it.

Nanonymous No.6220 [D] >>6229
IMO js itself isn't a bad technology, it just that it's WAY overused.
It would be nice if something similar to LibreJS was popularized so as to make a difference.

Nanonymous No.6229 [D]
>>6220
it's the worse PL ever popularized

Nanonymous No.6230 [D] >>6236 >>6404
ok. I searxed "site:.io"
All of these had the cuckflare ATTENTION REQUIRED ONE MORE STEP shit until I set my user agent to "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0"
https://www.taste.io/
https://proxysite.io/
https://csite.io/
https://poki.com/en/io
https://diep.io/
https://hole-io.com/
https://deeeep.io/
https://www.crazygames.com/c/io
http://io-games.site/
http://iogames.space/
https://slither.io/

Only this one still had ATTENTION REQUIRED ONE MORE STEP after I changed my user agent:
http://agar.io/

oh and this one https://btconline.io/ said:
Please turn JavaScript on and reload the page.
table
DDoS protection by Cloudflare
Ray ID: 50be9b90ffeee37a

>>6216
Well you shouldn't even need to change anything to get Tor Browser to work.

Nanonymous No.6236 [D]
>>6230
>Well you shouldn't even need to change anything to get Tor Browser to work.

That is the Tor Browser's default user agent.


Further proof THIS WON'T DO JACKITY SQUAT ABOUT GOOLAG CAPTCHAS !!!!!!!!!!!!!!!!!!!!

REEEEEEEEEEEEEEEEEEeeeeee

Nanonymous No.6242 [D][U][F] >>8612 >>8614
File: 890ff4466f688e2bf9ee75c50a3d5ed7531dffe4065e54d8403abd507b96a6f7.jpg (dl) (373.13 KiB)
Well, if you're turning JS on for some reason, don't forget to set
general.platform.override = Win32
in order to match OS in your User-Agent and one reported by JS.
https://developer.mozilla.org/en-US/docs/Web/API/NavigatorID/platform
> Most browsers, including Chrome, Edge, and Firefox 63 and later, return "Win32" even if running on a 64-bit version of Windows. Internet Explorer and versions of Firefox prior to version 63 still report "Win64".

Besides, your screen/window resolution/size still can be detected with these values (and possibly sent to the server with XMLHttpRequest):
window.screen.width
window.screen.height
-- screen resolution
window.screen.availWidth
window.screen.availHeight
-- screen dimensions excluding gui things like taskbar or other shit
-- why do they even need all of it?
window.outerWidth
window.outerHeight
-- browser window dimensions
window.innerWidth
window.innerHeight
-- viewport dimensions (browser_dimensions - gui_panels_like_tabbar)
Try to check it in browser console like: console.log(window.screen.width)


Nanonymous No.6322 [D] >>6323
Aare their legit no (legal) shopping sites that don't use JS?

Nanonymous No.6323 [D]
>>6322
pretty much

Nanonymous No.6404 [D]
>>6230
> All of these had the cuckflare ATTENTION REQUIRED ONE MORE STEP shit until I set my user agent to "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0"
Danbooru now lets me in after I changed it. Nice.

Some more links for your kawaii weaboo needs:
https://iqdb.org
https://anidb.net
https://vndb.org
https://gelbooru.org

Usable with disabled JS and via tor. However AniDB sometimes answers 403.

Nanonymous No.6612 [D] >>6622
>>5850
>Redirector
Invidition is a great firefox add-on that changes youtube links to invidious links. You can change to different invidious instances and most importantly it properly changes youtube links to invidious ones. Some redirectors let queries be sent to the youtube links before the invidious one loads.

Nanonymous No.6622 [D]
>>6612
Does it redirect better than Redirector?
Like changing any and all YT links, no matter of construction?

How about changing embeds as well?

Nanonymous No.6623 [D] >>6625
>>6192
>it literally is all or nothing

So your argument is, if the 1 random web site is gonna have your data, might just as well let the CIA, Mossad, the FSB and every datamining/selling corporation or scam call center in the world have it as well?
That's an incredibly dumb & counter-productive argument.

Nanonymous No.6625 [D]
>>6623
I think the suggestion being made is to not interwebz at all rather than letting (((them))) have it.

Nanonymous No.6651 [D]
>>6107
>That's like hand picking a few molecules of air and removing the ones you don't like from that selection.

Come to think of it, that's literally the entire point of a mask, a common device worn by people in specific situations where they don't want to die or become greatly unhealthy.

Nanonymous No.8589 [D][U][F] >>8590 >>8614 >>8635 >>8638
File: 37b9a643a1012b0759eb19c98d29932b5077a29c5bde0a2f1ed5e5bf936c9219.png (dl) (37.90 KiB)
For the cases where you might need to read something on Twitter, I've been using nitter.net, it is some form of twitter proxy that serves the pages with no javashit and no requests to Twitter from my IP. There's also an extension for it https://github.com/SimonBrazell/nitter-redirect

Nanonymous No.8590 [D] >>8625
>>8589
Nitter is great.
I would recommend Privacy Redirect instead though, as it also redirects for Invidious.
There is also Invidition but it's only for Firefox it seems.

Nanonymous No.8591 [D]
Oh and did anyone mention Digdeep's blog on extensions? (no)
Some useful and relevant commentary there:
https://digdeeper.neocities.org/ghost/addons.html

Nanonymous No.8611 [D][U][F] >>8614
File: 681fe4a6ec93f799e49b7e05f32030e0961527c16d5098e5ddb1daa3f7b0a00d.jpg (dl) (64.34 KiB)
JS isn't malicious. It really can improve usability, e.g. on nanochan clicking on post number could add it to the comment field.
Ah I wish something like LibreJS, i.e. something that'd require scripts to be trivial to run, suddenly got popular and compelled sites to trivialize their scripts and also made millions of webniggers lose their jobs

Nanonymous No.8612 [D] >>8614 >>8640
>>6242
Your screen size can be determined with css too

Posting a js script in an anti-js thread なのにもうす No.8614 [D][U][F] >>8618 >>8624
File: 4042003fbbe2e431e78c1f8146a72ecef232ad571da58f7c8f28e3ba30135ea1.jpg (dl) (607.07 KiB)
>>8589
Breddy cool.

>>8611
>It really can improve usability, e.g. on nanochan clicking on post number could add it to the comment field.
You can use this smol script i made the other day for that if you want:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

// ==UserScript==
// @name nanochan quote injection
// @version 1.1.0
// @author なのにもうす
// @include nanochanqwrwtmamtnhkfwbbcducc4i62ciss4byo6f3an5qdkhjngid.onion/*
// @include http*://nanochanqwrwtmamtnhkfwbbcducc4i62ciss4byo6f3an5qdkhjngid.onion/*
// @grant none
// ==/UserScript==
"use strict";
var content = document.getElementById("content"), post_form_comment = document.getElementById("comment");
content.addEventListener("click", function(event) {
if(event.target.parentElement.className === "post-number" && event.target.getAttribute("href") === "#postform") {
let quote = `>>${event.target.textContent}\n`, selection_start = post_form_comment.selectionStart, selection_end = post_form_comment.selectionEnd;
post_form_comment.focus();
post_form_comment.value = `${post_form_comment.value.slice(0, selection_start)}${quote}${post_form_comment.value.slice(selection_start)}`;
post_form_comment.selectionStart = `${selection_start}${quote.length}`;
post_form_comment.selectionEnd = `${selection_end}${quote.length}`;
}
});
-----BEGIN PGP SIGNATURE-----
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=QwU1
-----END PGP SIGNATURE-----

It runs in 4 milliseconds and adds quote in less than a millisecond, it's 10 lines of actual code so i guess you could call it trivial.

>>6242
>>8612
Use Tor Browser 9.0 with letterboxing active.
https://blog.torproject.org/new-release-tor-browser-90

Nanonymous No.8617 [D] >>8625
>5850
Don't use redirector - use invidition. I think redirector will let requests pass and then redirect you which means profiling is possible. It's designed as a utility, not a privacy tool.

Nanonymous No.8618 [D] >>8620 >>8659
>>8614
The ">>number" references in your post aren't highlighted for some reason.

Nanonymous No.8620 [D]
>>8618
lurk more

Nanonymous No.8624 [D] >>8634 >>8659
>>8614
>"use strict"
Why would you put that there? Why would you deliberately made it harder for yourself?

Nanonymous No.8625 [D]
>>8617 see >>8590

Nanonymous No.8634 [D]
>>8624
<Why would you use types?
<you are just making it harder for yourself

Nanonymous No.8635 [D] >>8636 >>8638
>>8589
>For the cases where you might need to read something on Twitter, I've been using nitter.net, it is some form of twitter proxy that serves the pages with no javashit and no requests to Twitter from my IP.
you can use http://archivecaslytosk.onion/ for that purpose. it doesn't support just twitter but almost any website.
1. Open http://archivecaslytosk.onion/
2. Paste link to page
3. Click save
4. Read page as if it was static html+css

Nanonymous No.8636 [D]
>>8635
Archive sites usually aren't much on interaction, which is often the main loss when disabling JS.
Overall good idea though.

Nanonymous No.8638 [D]
>>8635
Takes too much time. Nitter is immediate.
>>8589
Very nice anon, didn't know Nitter. It has RSS feeds too, which is great as twitter removed RSS from their API and Twitrss.me doesn't always work. Thanks for sharing.

Nanonymous No.8640 [D] >>8644
>>8612
But does that even matter, since the CSS is run offline and does not connect to server? Or does it?

Nanonymous No.8644 [D] >>8645 >>8647
>>8640
>But does that even matter, since the CSS is run offline and does not connect to server? Or does it?
CSS is malware. it can connect to server, if specific conditions are met

https://www.w3schools.com/cssref/css3_pr_mediaquery.asp
you can use this to download some resources from server only if specific condition is met, like screen width or height
Firefox and Tor Browser seems to support this

Nanonymous No.8645 [D] >>8647 >>8659
>>8644
how long until CSS is turing complete and "second javascript"? or is it already?

Nanonymous No.8647 [D] >>8659
>>8644 >>8645
Shit, at this rate we will have to call a purity spiral and engage in an anti-CSS crusade!

Nanonymous No.8659 [D][U][F] >>8665 >>8671
File: 4dc74acbacd10a6ef16b02d5800c6462032bd9b4cf5ffe03dd7253bec3759daa.jpg (dl) (37.01 KiB)
>>8618
>The references in your post aren't highlighted for some reason.
It's cause i've put "noformatting" in the email field, it's useful if you post code.
>>8624
>"use strict"
>Why would you put that there? Why would you deliberately made it harder for yourself?
Strict mode is a way to make javascript slightly less cancerous:
- javascript for some retarded reason was designed to hold developers hand, so it doesn't throw errors sometime, strict mode fixes this by giving error if you do stupid stuff.
- for some other retarded reason variables in javascript are not order dependent, strict mode makes them order-dependent which also means that the parser/compiler can optimize the code better.
I doesn't make it harder, it actually makes it better and more transparent to the programmer and faster to the parser/compiler.
Although on such a small script the difference is negligible, i usually use strict mode everywhere.
see https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Strict_mode
>>8645
>>8647
As expected by minimalist niggers, why not just stop using computers and internet allthoghether?

Nanonymous No.8662 [D]
the web is just burger shit.
the top health site is literally called "mayo clinic"
white people.

Nanonymous No.8663 [D] >>8672
here is a prime example of why the entire web is an unfixable pile of gay burger shit:
type in google:
>which amino acids for weight lifting
[the real question would be, what ratios/proportions of which amino acids, but we know if this simplified search doesnt work, that wont work either]
and instead of an answer, you get back a bunch of cucksumer clickbait that vaguely matches your search:
>The Best Amino Acid Supplements for Weight Training | Healthy
>How to Use BCAA (Branched Chain Amino Acids) - Weight Lifting ...
>The Importance of Amino Acids | Muscle & Strength
>How to Use Amino Acids for Bodybuilding - aminoco
>10 Best Amino Acids in 2019 [Buying guide] - GearHungry
>Amino Acid Power! - bodybuilding.com
OOGA BOOGA BRUUUUUH I HAD TOO MUCH PROTEIN I NEED MORE AMINO ACIDS INSTEAD WOAHHHHH
>How important are amino acids in weight lifting? | Yahoo Answers
also
>OATH | YAHOO.COM IS NOW AN OATH THING BLS ENABLES JEWSCRIPT AMD COOKIEZ

Nanonymous No.8665 [D] >>8666 >>8672
even just a search like
>how much of which amino acid to get
is an utter failure. how do fucking {b,z}oomers still manage to say shit like
>OH WOW GOOGLE IS DA BEST ALL I HAVE TO DO IS ASK IT A QUESTION AND IT TELLS ME THU ANSWER!!11
>>8659
removing CSS is not minimalist you utter fucking retard. it's required for basic functionality, such as the browser not freezing for hundreds of ms up to multiple seconds each time you open a page or change tab or do anything what so ever. literally 1 in 100000000000 websites that require CSS to read are remotely useful

Nanonymous No.8666 [D] >>8667 >>8669
>>8665
>search "list and dosage of amino acids for weight lifting"
First result: https://www.bodybuilding.com/content/amino-acids-guide.html
It includes a list and dosage ans instructions.
Leanr how to make proper queries nigger.

Nanonymous No.8667 [D]
>>8666 (me, checked)
>It includes a list and dosage ans instructions.
<It includes a list with dosages and instructions.

>Leanr how to make proper queries nigger.
<Learn how to make proper queries nigger.

Nanonymous No.8668 [D] >>8669
Oh second result i got is: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5568273/ a scientific paper

Nanonymous No.8669 [D]
>>8666
yes i got that useless magazine article in my search as well, and on your search it was #12 after a bunch of much worse clickbait
>>8668
I'm not looking for some meme substance to take. What the fuck is BCAA? I'm looking for some basic facts. Like if I do N amount of exercise, how much should I increase intake of each essential amino acid?
They have very simple answers for vitamins
For example the EFSA states that you should have 0.1mg/MJ (1MJ=238.8kcal) of vitamin b1 per day.
So why no simple answers for amino acids? I'm sure there are, I just haven't looked into it yet. I just wanted to show how shit every web seach engine is for such as simple question.

Nanonymous No.8671 [D]
>>8659
>minimalist bad
>just stop using computers/internet lol
Defeatist garbage.
You don't even have to be minimalist to be against at least most JavaScript and the aforementioned CSS.
Minimalism is a design choice that positively affects performance, and gets rid of things things that can break or have security holes.
But even if you were a maximalist, a card-carrying Ultimate Edition user or something, you could still be security conscious.
And if you were security conscious, (security including general privacy and anonymity) you would look askance at the potential for tracking and data mining in JavaScript as it is most commonly used, and, apparently, CSS now.

Nanonymous No.8672 [D] >>8674 >>8675
>>8663
>type in google
>and instead of an answer, you get back a bunch of cucksumer clickbait that vaguely matches your search
the job of jewish Google is not to provide you with search results you want, their job is to market shitty products and make you goy buy them
we need to nationalize or holocaust google, kill all google owners, CEO, key people
then we need full communist, open source, search engine. search engine should be non-profit, it should be for humanity and transparent

>>8665
>literally 1 in 100000000000 websites that require CSS to read are remotely useful
the ironic thing is, it's the opposite, many websites do not work with CSS as they display some white block on screen to hide text and make you enable javascript. if you disable CSS you can read the text without any block in front of it

Nanonymous No.8673 [D] >>8675
>google sucks
Yes.
Real men use SearX.
>amino acid related search
If you can't find what you need through a few (PROPERLY FUCKING CONFIGURED) SearX searches (WHILE USING A GOOD FUCKING INSTANCE) and maybe some Ctrl+Fing, then find a forums or chat and ask there.
Sometimes it can be quite annoying when you can't find a specific answer to a very simple problem, and you have to go roundabout ie "amino acid guide" (not saying that will or won't find you what you need, just giving a general example).

Nanonymous No.8674 [D] >>8681 >>8690
>>8672
>many websites do not work with CSS as they display some white block on screen to hide text and make you enable javascript. if you disable CSS you can read the text without any block in front of it

I'm going to keep this in mind.
Big if true.
Still wouldn't work with sites like Amazon though.

Nanonymous No.8675 [D] >>8680 >>8681
>>8672
>If you disable CSS you can read the text without any block in front of it
so in other words they don't require CSS to read. lol
>>8673
every web search engine has the problems i mentioned. because faggots just SEO their cancer to the top. it's not a solvable problem when you accept arbitrary bullshit sources into your crawler

Nanonymous No.8680 [D]
>>8675
>every web search engine has the problems i mentioned. because faggots just SEO their cancer to the top. it's not a solvable problem when you accept arbitrary bullshit sources into your crawler

So basically you are raging against search engines as a whole, not trying to solve your actual problem.
You could have been more clear.

Nanonymous No.8681 [D] >>8683 >>8920
>>8674
another way is to right click on the item that is blocking view, then Inspect Element, then when it's selected in Web Developer view, you right click on selected text and click Delete Node
but keep in mind it's not remembered so when you reload page or open another link on the page it will have the block again

>>8675
>because faggots just SEO their cancer to the top.
then kill them or put to prison. make SEO cancer illegal
or make a system that people can report such sites and after review they are destroyed from internet or search engines

>it's not a solvable problem when you accept arbitrary bullshit sources into your crawler
then don't accept bullshit sources

Nanonymous No.8683 [D] >>8701
>>8681
>or make a system that people can report such sites and after review they are destroyed from internet or search engines
I think findX used to do this (a rating system), but apparently doesn't anymore.

Nanonymous No.8690 [D]
>>8674
good example is the lyrics wikia. They literally have a noscript tag with some css to block the lyrics. I think to prevent scraping they replace all the text with html forms like &#84;. Maybe it works, idk

Nanonymous No.8699 [D][U][F] >>8701 >>8706 >>8721 >>8920
File: ce6351d36e7b71e91cf1cd0e6114236db3ebfa6517744bde8937ec32dccacd8e.png (dl) (2.18 MiB)
Any non-javascripted lyrics sites? Where do I find song lyrics without having to load 25MB of malicious html+css+js emulsion?

Nanonymous No.8700 [D][U][F] >>8701 >>8705 >>8920
File: 4400f1181a33843fb1ad8a18017b324855daf8aee83bb9ac4ea94b51e2f6b78c.jpg (dl) (688.92 KiB)
Why

Nanonymous No.8701 [D] >>8702 >>8920
>>8683
yeah sure that won't be exploited for censorship lol
>>8699
just block styles and script lol
>>8700
it's cause you are using european ip addrees or exit node, use american one and that won't happen, easy to fix

Nanonymous No.8702 [D] >>8706
>>8701
>just block styles and script lol
Most of them refuse to load if you disable JS. Yes, they require js to display just some plain text.

Nanonymous No.8705 [D]
>>8700
Collins actually works without JS enabled.
If the cookies popup is still there, use uBlock, perhaps with the cookie list enables.

Nanonymous No.8706 [D]
>>8699
>>8702
azlyrics works fine without scripts. You can also scrape their pages fairly easily, though they'll block your IP if you do too many requests.

Nanonymous No.8721 [D]
>>8699
>Any non-javascripted lyrics sites? Where do I find song lyrics without having to load 25MB of malicious html+css+js emulsion?
just write your own software that will open one of such sites and extract lyrics from html page

something like youtube-dl or Weboob but for lyrics

Nanonymous No.8920 [D]
>>8681
>then kill them or put to prison. make SEO cancer illegal
found the lolstatitarian.
the problem can already be solved with a web of trust. they work to filter spam in freenet, why can't they filter clickbait as well?
>>8699
it doesn't exist.
>>8700
because white people
>open newspaper
<WOAHHHH WEBSITES CAN SPY ON YOU
>WOAH WEBSITE CAN SPY ON ME IMMA POST A COMMENT ONLINE WHY CAN DA GUBBAMINT FIKS DIS
nek minute
<be on any site ever
<blocks your path with popup
<we value your privacy goy
<[accept]
>>8701
that's not a fix that's a workaround. also one that shrinks your anonymity set

Nanonymous No.9192 [D] >>9193
>>5907 >>5908
Kinda confusing they have two listings of "Google Translate".
One for a whole web page, another for text pasta.

Nanonymous No.9193 [D]
>>5907 >>5908 >>9192
>another for text pasta.
Which does not work without JavaScript it seems.

Nanonymous No.9730 [D] >>9733
Thanks for sharing nitter, works really well. I was gonna write a scraper for mobile.twitter.com but now no need.

There's this dude sivers.org that pushes minimalism (even recommends OpenBSD kek), you can find some links from there to indie web stuff which is often minimalist and js-free (but not always).

Email:
https://trac.torproject.org/projects/tor/wiki/doc/EmailProvider
https://old.reddit.com/r/onions/wiki/index/email
http://torbox3uiot6wchz.onion/relay-en.php
https://www.prxbx.com/email/ (haven't checked)

Nanonymous No.9733 [D]
>>9730
Heh:
https://sivers.org/learn-js