The problem is that that by being "that guy" you're probably giving them 10 bits or more of identification. If they can just scrape a few more bits from somewhere they'll have you uniquely identified.

But, yeah, these guys can get on Golgafrinchan Ark B with the rest of the adtech industry as far as I am concerned.

Good luck. It's amazing how little of today's web is good old HTML. A while ago I visited a website that used Markup - but that wasn't compiled into HTML and then statically served, oh no - it was rendered in JS client side. WTF.

Join me, and do it! There is a great Firefox extension called uMatrix, which makes it easy to disable JavaScript not just on a site-by-site basis, but also by subdomain (and easy to re-enable for sites that break without js).

Good luck, I recently gave up that fight after needing to disable it to view the content of nearly every single website I visited.

It's not even just cloudflare and similar DDOS checks, but now even things that should just be in the HTML of the page are loaded with JS.

It's exactly such reasons why TOR browsers would have JS disabled.

As the internet gets more and more hostile, this will become more and more correct.

It won't save from fingerprinting: https://fingerprint.com/blog/disabling-javascript-wont-stop-.... Though I don't think it's used in practice, because disabled JS is a red flag on its own in situations where fingerprinting is used for security.

they compute the deviceid on the server using signals from the browser. i think having js disabled is just another signal.