this post was submitted on 23 May 2026
12 points (80.0% liked)

No Stupid Questions

4104 readers
15 users here now

There is no such thing as a Stupid Question!

Don't be embarrassed of your curiosity; everyone has questions that they may feel uncomfortable asking certain people, so this place gives you a nice area not to be judged about asking it. Everyone here is willing to help.


Reminder that the rules for lemmy.ca still apply!


Thanks for reading all of this, even if you didn't read all of this, and your eye started somewhere else, have a watermelon slice ๐Ÿ‰.


founded 4 years ago
MODERATORS
 

So the other day someone linked to a website that highlighted how much information is just gifted to any place you visit on the web.

I'm aware of some of it being intrinsic to the manner of connection. A website knowing your IP (even if that is the IP of the vpn or tor exit node you're using) is basically essential to the function of the internet. Why everything else though? What fucking idiot/asshole decided to even have an api for your gpu? Why the fuck is my browser reporting on the battery status? Light/dark mode? Visibility (whether or not the tab is 'active', the fuck?!? My OS?!!???!?!!!?!?!?

As a side question, why is the capability built in by a browser, but the user is never given a choice about whether or not any of this is shared?

you are viewing a single comment's thread
view the rest of the comments
[โ€“] bjoern_tantau@swg-empire.de 2 points 16 hours ago (1 children)

Most of these things actually are purely client side. But nothing can prevent the website from sending that information back to the server.

Or they can be inferred from the client behaviour. Like you said from the GPU capabilities you can get to the actual hardware. If a client only downloads the dark mode CSS it knows which mode the user is currently on.

Why do you think a client should have to download a dark mode CSS separately? Have you put any thought into why that is treated as a separate request, rather than a function of an existing page that could be switched between offline without any acknowledgement sent from the client?

Web standards have been butchered to force these constant validation measures for the sole purpose of telemetry/spyware. A client should be able to render a web page however the fuck it wants and the server that sent the page should be none the wiser.

And what of things like battery status? That has no legitimate purpose at all. No web site is going to change its behavior in response to your battery status, but current charge % and battery wear stats alone are enough to perfectly distinguish your mobile device from anyone else that you would be sharing a IP address with.