Comment by 1vuio0pswjnm7

"You're protected from the methods I use here. You disabled JavaScript, so this fingerprinting trick can't run at all. You're still vulnerable to network-based methods. Read on to see what it does to everyone else."

You took a guess. You guessed wrong

I have not "disabled Javascript". The software (pl.) I'm using to request and read web pages has no Javascript interpreter

I can also insert a CSP response header such as "default-src: 'none'" and get the same result ("...") even when using software that runs Javascript with Javascript enabled

This "data" does not seem very useful for advertising except perhaps something like "don's waste time trying to target this user as they will not see or hear the ads"^1

What are these "network-based" methods exactly

I never see any ads when using the www. I attribute this mostly to not using popular software controlled by companies or individuals that advocate for internet advertising. This software could be something as complex as an operating system or a "browser" or something as simple as a Javascript sourced/planted in a web page

Whatever these "network-based methods" are, they don't seem to be very effective at targeting me with ads

I generallly stay in textmode. Most internet ads seem to be graphical and/or audiovisual in nature

Hypothetically, if a "developer" tried to target me with text-based ads, I could easily filter them out

I already filter the text in response bodies using a local forward proxy

For example, the "score" on HN comments I submit never goes below 1 in the HTML I'm reading. In theory this helps avoid self-censorship

Here is an excerpt from rewrite.lua

   if host=="news.ycombinator.com" then
   body = string.gsub(body, "%(<span id=\"karma\">%d+</span>%)","")
   body = string.gsub(body, "-%d points","1 point")
   body = string.gsub(body, ">0 points",">1 point")
   body = string.gsub(body, "width=\"%d+\"></td>","width=\"0\"></td>")
   end

1. Of course companies like Cloudflare are using the www user's choice to run/not run Javascript as a way to collect fingerprints and filter out users who are not using advertising-friendly software