Dark mode
Dark mode
Are there any privacy-respecting dark mode add-ons for Firefox that you would recommend? I've read online that Dark Reader isn't great for privacy.
17 comments
-
I thought none of them were good for privacy because you're deviating from the default page render. But I would like to learn more about it.
-
Dark reader is only an issue for privacy as it injects CSS into the Dom (like all other extension need to do) and this injected CSS is used for fingerprinting.
-
and this injected CSS is used for fingerprinting.
Which, if I'm understanding correctly, would be exactly the same as if the viewer had set their browser theme to dark, so it's not like the extension is more a loss of privacy than enabling the setting in the browser?
In the end, what we really need is a browsing mode that allows(maybe?) javascript, but doesn't allow it to read properties of the renderer (viewport size, resolution, colors, fonts, etc). Since having that info stopped being necessary for customizing pages back in, like, CSS 2.1.
-
Yes.
Yeah, we essentially need to split the renderer from the rest of the browser in a significant manner. But HTML, css, js is a fucking mess so its pretty unreasonable to restrict it much further u can't restrict viewport sizing or resolution cos that will fundamentally break almost every framework. Also I'm sure their would be like 1000 exploits to get that data indirectly by comparing the sizes of CSS relative and absolute components.
Swapping out colours/fonts at the rendering layer is essentially what I was thinking but I go a step further by completely separating the rendering/interaction from the actual web sandbox running any code. U could even do something where u only input keyboard/mouse data to the proxy in a way that obfuscates behavioural analysis. If u also do a vm u can introduce noise into webgl making canvas fingerprinting impossible.
-
-
only an issue for privacy
So it is an issue for privacy? What's "only" about it?
-
Well its only an issue for that one specific attack vector.
And in its not unique to dark reader its the same for almost every single browser plugin.
Their is a theoretical solution although I haven't seen much discussion on it. It would be to have a browser that runs 2 instances 1 is a sandbox that is identical across all devices and hardware which runs in the background with all the website code (I'll call it proxy). And one instance that just renders the content of the proxy and passes back clicks and keyboard events (let's call this instance interface). You can then make any modifications to interface that u want without any fear of having it be fingerprintable as all it does is render the Dom of proxy.
Theoretically u could even run proxy on a separate VM or even another computer.
-
-
-
FWIW, you might also consider Firefox's built-in reader view, which can be configured to use a dark theme.
-
I use the userchrome css file to change background colors of sites i use all the time. Its a much better idea than darkreader but im pretty sure it can be used to fingerprinting data point.
-
midnight lizard worked great last time I checked it
-
Invert your screen colors. In kde you can invert the colors of a window with a keybind, I use that to get light mode on dark mode only websites
17 comments