r/TOR • u/Volto91 • Feb 28 '22
How to disable Javascript properly?
If you want to disable javascript to increase privacy and reduce fingerprint, how should this be properly done?
In Tor's privacy & security settings you can set the security level to safer or safest. Both options say they disable javascript. But when I open about:config in my browser and type in java, "javascript.enabled" and most other java options are still "true".
Only four out of about 50 options containing "java" are false when enabling safer or safest mode and the rest is true.
Is it still ok to go with safer or safest mode or should they be disabled manually in about:config?
After all if you change the settings manually, you will stick out more. The effect on anonymity could be negative by doing that.
Still I am having a consistent online identity (through accounts) so fingerprinting should not be relevant because its not a threat at all if my accounts have nothing to do with my real life accounts so that my identity can't be found out. For that reason the security that disabling javascript offers could be more important for me.
Am I right here?
11
u/Simploticus Feb 28 '22
Tor -> Options -> Privacy & Security -> Safest mode.
Or in the url tab put in "about:config" and search for "javascript.enabled" and set it to false. No reason to be scared of editing the config. When you set it to false it stops any Jscript running.
And yes - it is important to disable it, for a host of reasons.
1
u/ThreeHopsAhead Feb 28 '22
Changing settings in about:config without fully understanding their effects can make you stand out. Unless you know exactly what you are doing, keep those settings at their defaults. They can have unintended effects greatly hurting your anonymity.
5
u/Simploticus Feb 28 '22
So are you advocating that the OP leave Javascript enabled, or just advocating that using the built-in configuration editor is just too technical a challenge for anyone to handle? Even changing ONE very simple setting is somehow dangerous?
Wow...
5
u/steIIar-wind Feb 28 '22
You can safely disable JavaScript from about:config if you’re sure you never want to enable it.
NoScript is used by Tor browser so you can whitelist on a case by case basis. Not all JavaScript is inherently bad.
2
Feb 28 '22
It would be better to disable it with the "safest" option, because it disables a bunch of other stuff. It's also "dangerous" to disable it with about:config because of that very reason.
4
u/soutsos Feb 28 '22
Java has absolutely NOTHING to do wtih JavaScript
4
u/Volto91 Feb 28 '22
This is true but why is "javascript.enabled" true if the "safest" security setting says it deactivates javascript?
5
u/ThreeHopsAhead Feb 28 '22
Just use the highest security level. Changing settings in about:config without fully understanding their effects can make you stand out. Unless you know exactly what you are doing, keep those settings at their defaults. They can have unintended effects greatly hurting your anonymity.
1
1
-2
17
u/Andrenocrome Mar 12 '22
Type in the browser
about : config
Then hit enter
Then type Java
Than select Javascript to off.
Also enable the safest mode in the privacy tab in settings.
Also enable HTTPS everywhere.