Unfortunately some of the stuff that allows fingerprinting falls into a convenience vs privacy argument. It allows a website / web app to make changes to display things more appropriately, or have helpful functionality. That’s why when you use a browser that is very strict about fingerprinting, some stuff will break.
An even simpler example is the screen aspect ratio. On a small screen, you want to use as much of the space as you can, but that information can be used for fingerprinting. This was annoying on browsers like mullvad, before they updated the aspect ratio to something more modern.
That doesn’t excuse companies that abuse that data for malicious fingerprinting.
You’d rather have your browser use the bandwidth to download all 500 language versions and 200 otherwise localized versions of the website and use some random language as default, maybe chinese or spanish for being the biggest languages.
Is it possible for URL to request the one that i want?
I feel like i remember different language versions of webpages from before browser fingerprinting - though I guess I don’t know long ago it started.
Even so, it seems like it only needs to know my request as a one of 500 group. An individualised fingerprint of 1 in 10bn seems like overkill to me. Assuming that’s what fingerprint means in this context.
I’m ok to give them 1 in 500 resolution (or whatever rough order of magnitude) to tell them i want to read the EN version. That’s a lot less precise than 1 in 10 billion or whatever the fingerprint is.
Thing is, while it wasn’t called “browser fingerprinting” immediately, it basically started as soon as JS was around. And feature-detection / media-queries actually make for better compatibility than just User-Agent strings (and other headers).
Content negotiation never really caught on, as best as I can tell. There’s a number of headers that the client can send so that the server can select a version by language, content-type, and a few other things, but in all the web deployments I’ve ever done content-negotiation was never a consideration.
Or just the main language where the website is located. It isn’t difficult to add a language icon somewhere at the top or bottom.
Nothing about it needs to track the user. The only info you give them is that you can speak a certain language. Not that it is your main language. Or that you can only understand one.
Like the other person said, you’ve already become a data point by visiting the page.
Nothing about it needs to track the user. The only info you give them is that you can speak a certain language. Not that it is your main language. Or that you can only understand one.
Needs to, no, but they will. Regardless of whether or not it’s your main language, you will be a data point by selecting your preferred display language. Unfortunately, of course.
As someone not in the USA, I cannot tell you how absolutely annoying and terrible it is when the website automatically selects a language/region for you. It happens so often.
“Oh, you have a Polish IP? Here is the whole website in Polish. Also, the address field will now only accept Polish addresses!”. Nah bro, I just live near the border. I wish I could select language by adjusting the path, that would be so much better than what some sites do.
Your example isn’t even the worst. Polish IP and Polish language.
I have an Estonian IP so I’ve had websites determine I want everything in Russian.
There was some website at one point that didn’t even give me an option for English. Estonian IP? Okay, you speak Russian. You don’t speak English. And we don’t support Estonian.
IT’S NOT EVEN AN OFFICIAL LANGUAGE FOR THE COUNTRY WHERE MY IP ADDRESS IS LOCATED
Yeah exactly. A lot of features are like, let’s design the website to perfectly suit your device. But then that means they know everything about your device, otherwise they can’t design for it. Then, if they know everything about your device, bad actors will abuse that information. So the only solution is going back to shit websites, but nobody wants that, so we just kind of pretend that it’s not a problem and compromise as best we can
Unfortunately people want things like websites being easily readable regardless of device form factor, language being automatically detected, ability to choose font families for readability… I know, people are idiots.
I kinda dont see a problem “boring” shitty websites that do its job. For example Wikipedia hasn’t changed much and it’s still my most used website, it gives me a good sense of familiarity and I know exactly what to find where
Unfortunately some of the stuff that allows fingerprinting falls into a convenience vs privacy argument. It allows a website / web app to make changes to display things more appropriately, or have helpful functionality. That’s why when you use a browser that is very strict about fingerprinting, some stuff will break.
An even simpler example is the screen aspect ratio. On a small screen, you want to use as much of the space as you can, but that information can be used for fingerprinting. This was annoying on browsers like mullvad, before they updated the aspect ratio to something more modern.
That doesn’t excuse companies that abuse that data for malicious fingerprinting.
Most of this stuff is done locally by the browser using media queries in CSS. There is no reason for that data to make its way to the server.
I’d rather have less interactive (or whathaveyou) websites than the fingerprinting. The trade wasn’t worth it.
You’d rather have your browser use the bandwidth to download all 500 language versions and 200 otherwise localized versions of the website and use some random language as default, maybe chinese or spanish for being the biggest languages.
Dude, language detection is literally done with a simple HTTP header set by the browser. There is no need for all the other crap.
Is it possible for URL to request the one that i want? I feel like i remember different language versions of webpages from before browser fingerprinting - though I guess I don’t know long ago it started.
Even so, it seems like it only needs to know my request as a one of 500 group. An individualised fingerprint of 1 in 10bn seems like overkill to me. Assuming that’s what fingerprint means in this context.
Be requesting the specific language site you are giving them the information anyway.
I’m ok to give them 1 in 500 resolution (or whatever rough order of magnitude) to tell them i want to read the EN version. That’s a lot less precise than 1 in 10 billion or whatever the fingerprint is.
Some browsers literally have a ‘spoof is language to english’ option to anti fingerprint. To hide in the horde.
And I’d rather DL 500 languages of actual content than 1mb of page and 2GB of ad shit.
Bold of you to assume that modern websites will not be 1gb of pages and 2gb of ads
Thing is, while it wasn’t called “browser fingerprinting” immediately, it basically started as soon as JS was around. And feature-detection / media-queries actually make for better compatibility than just User-Agent strings (and other headers).
Content negotiation never really caught on, as best as I can tell. There’s a number of headers that the client can send so that the server can select a version by language, content-type, and a few other things, but in all the web deployments I’ve ever done content-negotiation was never a consideration.
Almost any information can be abused.
Website should just present me with a list of languages available and i click the one i want
And which language would it start in, in order to offer you this list?
Imagine if every site did this, it would be so cumbersome. Worse than the cookie banners.
And either way, when you select the language, you’ve given them the fingerprinting data anyway. 😂 Completely pointless.
The language that is chosen in the top level domain of the URL.
If it is a domain.es it is in Spanish.
If it is a domain.co.uk it is in English.
If it is a domain.it it is in Italian.
Or just the main language where the website is located. It isn’t difficult to add a language icon somewhere at the top or bottom.
Nothing about it needs to track the user. The only info you give them is that you can speak a certain language. Not that it is your main language. Or that you can only understand one.
Like the other person said, you’ve already become a data point by visiting the page.
Needs to, no, but they will. Regardless of whether or not it’s your main language, you will be a data point by selecting your preferred display language. Unfortunately, of course.
But you are similarly revealing your language by going to said url.
I already have to scroll past 20 options to get to Australia in country drop down lists lol
I just go to /fr for French. That sounds like a non-issue.
Then you just tell them your language anyway, but it’s more cumbersome to you.
As someone not in the USA, I cannot tell you how absolutely annoying and terrible it is when the website automatically selects a language/region for you. It happens so often.
“Oh, you have a Polish IP? Here is the whole website in Polish. Also, the address field will now only accept Polish addresses!”. Nah bro, I just live near the border. I wish I could select language by adjusting the path, that would be so much better than what some sites do.
Your example isn’t even the worst. Polish IP and Polish language.
I have an Estonian IP so I’ve had websites determine I want everything in Russian.
There was some website at one point that didn’t even give me an option for English. Estonian IP? Okay, you speak Russian. You don’t speak English. And we don’t support Estonian.
IT’S NOT EVEN AN OFFICIAL LANGUAGE FOR THE COUNTRY WHERE MY IP ADDRESS IS LOCATED
Nevertheless, you do actually understand a decent amount of Russian…and if you’re old enough you are fluent.
Yeah exactly. A lot of features are like, let’s design the website to perfectly suit your device. But then that means they know everything about your device, otherwise they can’t design for it. Then, if they know everything about your device, bad actors will abuse that information. So the only solution is going back to shit websites, but nobody wants that, so we just kind of pretend that it’s not a problem and compromise as best we can
Don’t speak for the lot of us.
I want to go back to websites that were actually just functional websites that did the thing they were designed to do and nothing more.
Unfortunately people want things like websites being easily readable regardless of device form factor, language being automatically detected, ability to choose font families for readability… I know, people are idiots.
Most people don’t actually want that unfortunately. I agree with you but the numbers don’t lie. People love bloated and annoying websites
I kinda dont see a problem “boring” shitty websites that do its job. For example Wikipedia hasn’t changed much and it’s still my most used website, it gives me a good sense of familiarity and I know exactly what to find where
Maybe I am weird but I kinda preferr boring TBH