• 2 Posts
  • 42 Comments
Joined 2 years ago
Cake day: September 14th, 2023
  • Fijxu@programming.devtoPrivacy@lemmy.ml•Does using Cloudflare's cdnjs compromise privacy?
    0·
    1 month ago

    I don’t trust cloudflare. That is just a JS CDN that pulls a file, but is still gathered from an external server. In my case, when I have to use CDNs to use a JS library, I just download the file and host it locally.

    You don’t own the CDN, is controlled by other people, which means that of course is less private to the end user, and more insecure since you rely on the people running the CDN and the author or the library. What would happen if the library author/authors get hacked and they add malicious code to the library? (Asumming it doesn’t contain a integrity attribute like the one on your example).

    Is better to trust yourself, it doesn’t cost you anything to download a few kB of a JS file and serve it directly from your server. The page is not going to load 2s faster if you use a JS CDN

    And no one wants this to occur to their websites: https://fossa.com/blog/polyfill-supply-chain-attack-details-fixes/

  • Fijxu@programming.devtoPrivacy@lemmy.ml•Is there a downside to using Tailscale when it comes to privacy?
    2·
    8 months ago

    Not a response, but I used to use taikscale with my own headscale server without problems but for some reason it just started to fail (I didn’t even updated tailscake nor headscake at all) and the speeds with direct connection were some unbelievable 0.00Mbps over direct connection.

    I searched for another MeshVPN and I found something called NetMaker, you can Selfhosted it too and it works really well. The speed is better than Taikscale too because it uses kernel wireguard instead of user space. They still lack some features like an Android client but I don’t care. I just want to connect servers securely. It’s pretty new software so it can have some bugs.

  • Fijxu@programming.devtoPrivacy@lemmy.ml•'you can have a new IP every time you click a new link'
    463·
    8 months ago

    Changing the IP constantly is not going to prevent tracking on modern websites. They all use other methods to identify you like browser fingerprint and other ways to fingerprint you.

    I don’t know why VPN providers promote themselves as like they are going to make your connection more private, everything is already encrypted (except DNS). You are just shifting the trust from your ISP to the people that run the VPN.

    If you are in a country with a high rate of censorship or you just want to circumvent geo blocking, using a VPN is worth, otherwise, a VPN is just a way to change your IP address which, is not going to prevent any tracking.