[ / / / / / / / / / / / / / ] [ dir / animu / arepa / bestemma / clang / monarchy / nofap / sonyeon / vichan ][Options][ watchlist ]

/tech/ - Technology

You can now write text to your AI-generated image at https://aiproto.com It is currently free to use for Proto members.
Email
Comment *
File
Select/drop/paste files here
Password (Randomized for file and post deletion; you may also set your own.)
* = required field[▶ Show post options & limits]
Confused? See the FAQ.
Expand all images

File (hide): 8207a893e8495d6⋯.png (90.54 KB, 545x470, 109:94, googlefont.PNG) (h) (u)

[–]

 No.994300>>994302 >>994319 >>994432 [Watch Thread][Show All Posts]

How do you deal with not using Google fonts?

Do you realize most font systems are Turing complete and can be used as a vector for not just tracking but inserting code?

Why does every single website require Google fonts to display correctly when wingdings and such are available on most systems?

 No.994302>>994303

>>994300 (OP)

>How do you deal with not using Google fonts?

I check the alt text or just ignore it. If it's unusable without it: Into the trash it goes.


 No.994303>>994309 >>994311

>>994302

that's what I'm doing, but I thought that maybe there would be some workaround or something people are doing I don't know about.

It's stupid that every single website uses it, it should just be local at this point.


 No.994309>>994311

>>994303

>it should just be local

Decentraleyes?


 No.994311

File (hide): 4bd6b2a083cccc5⋯.png (9.71 KB, 382x153, 382:153, decentraleyes 8ch.png) (h) (u)

>>994309

>>994303

Looks like it doesn't actually filter Gfonts, at least here.


 No.994312>>994314 >>994397

Might as well not host .CSS and images, since they are both Turing complete, and always vectorized.


 No.994314>>994330 >>994397

>>994312

Even if you were right, which you're not, that's not an excuse to add an other attack vector just to repetitively host the same damn font.


 No.994319

>>994300 (OP)

>How do you deal with not using Google fonts?

On my Arch system I've installed all google fonts from AUR, and blocked fonts.googleapis.com in hosts. Since I have all the fonts locally, everything displays correctly.


 No.994325

I have uMatrix setup to block all scripts and everything 3rd party (including images). I individually allow scripts on a per site basis. The current state of the web is atrocious. I remember the trend and later 'best practise' of using google to server javascript libraries really taking off when jQuery became popular. "If everyone uses google, it gets cached and improves page loads XDDDDD". Of course that barely matters since it seems almost every site in the world uses Google Analytics. I hope those of you who run websites respect your users enough to generate analytics from server-side logs.


 No.994330

>>994314

Let me guess, you can't use a search engine to find out that .CSS since v3 is completely TC, and was designed for (((dynamic))) resource fetching,

and that all file formats have to be TC in order to prove your file format is portable?

It's like I'm talking to a retard that has never made a file system or type, and they presume the (((web))) wasn't made to be insecure from draft 0.

Tell me Zunner, how did you fetch this website?

The incorrect answer here will demonstrate how truly ignorant you are of the inter nets as a whole.


 No.994388

i don't hear much about antimalware and security design regarding fonts at all, other than

>disable all non local fonts

which is the Tor Browser approach, and

>use lynx retard

which is the method chosen by greybeards and suckmore cock goblins

luckily most web browsers are sandboxed, but that obviously doesn't always work


 No.994397

>>994312

>Might as well not host .CSS and images, since they are both Turing complete, and always vectorized.

>>994314

>Even if you were right, which you're not,

No you double nigger, if you know fuck all that doesn't make the anon incorrect - it means you're a double nigger that knows fuck all.

CSS & images are used as attack vectors, even a JPG in an compliant HTML5 page can pwn a machine.stegosploit


 No.994432

>>994300 (OP)

8ch doesn't use google fonts, and google fonts don't contain wingdings betond whatever is in unicode. Your problem might be that you block all fonts, and whatever chstom font 8ch uses as a byproduct. Solution is to use umatrix and only block google fonts.




[Return][Go to top][Catalog][Screencap][Nerve Center][Cancer][Update] ( Scroll to new posts) ( Auto) 5
12 replies | 1 images | Page ?
[Post a Reply]
[ / / / / / / / / / / / / / ] [ dir / animu / arepa / bestemma / clang / monarchy / nofap / sonyeon / vichan ][ watchlist ]