cross-posted from: https://lemmy.world/post/31859998
Please see the cross-post as it is updated.
As a security-conscious user, I’ve used NoScript since Firefox’s early days, but its restrictive nature has become frustrating. I’m often forced to go unprotected just to access websites with multiple scripts running on different domains, which defeats the purpose of using NoScript and balances security and usability that it once provided.
Is there a way to block browser JavaScript from executing commands that retrieve sensitive information from my local machine, while still allowing JavaScript that is only used for rendering web pages?
greatly appreciate any insight
cross-posted from: https://lemmy.world/post/31859998
Please see the cross-post as it is updated.
Browsers typically ask you to grant permission before sharing sensitive information.
Windows sandbox? Or sandboxie I suppose
Could you be more specific? What senstive information?
by sensitive information I’m referring to
- local machine time
- local machine ram
- local machine operating system + version
- local machine hardware
- Serial Number
- Hardware ID
- UUID
- Windows Device ID
- Windows Product ID
- …
Can I prevent javascript from running specific command that retrieve these information?
- local machine hardware
- Serial Number
- Hardware ID
- UUID
- Windows Device ID
- Windows Product ID
- local machine ram
Can not be accessed through Javascript anyway
- local machine operating system + version
Accessible through so called “User Agent”, you could install User Agent changer addon to make your machine like its running different operating system/ web browser
- local machine time
when resist fingerprinting is enabled, local time is not shown, instead it always think your time is UTC
Much appreciated