Yes you're right, but disabling JS also makes you stand out way more wrt fingerprinting, and you can still be fingerprinted with HTML/CSS, TLS and other methods.
That is not true. On chrome, they could be fingerprinted using the way that extensions load remote assets (which I dont think is still possible). On Firefox, that has not been possible (maybe ever but at least for a while). The way that extensions are fingerprinted requires detecting the way they interact with the web pages DOM, which is not something many extensions do.
I don't see any extension info and I don't see how there could be any. There isn't any api for gaining this info in ff at the very least.
There are other issues, but most extensions can in fact not be detected by websites, unless they specifically add something that makes them detectable.
Lokinet is sus with its model imo. Unlike i2p, the idea of which is lowering the bar for being a node, it raises the bar impossibly high for most of us. If you have the insane sum it requires to host a node, it would be more useful to the world if you spend it on hosting good Tor or i2p nodes imo.
Misleading title. Using this with your day to day browser burns out any idea of anonymity.
If you want to be safe, make a bare bone Arch Linux VM and use this extension with GNU Icecat. Also change your DNS from your ISP to something like Quad9.
Does icecat use a custom user config that provides more privacy/security? I see on their page they package it with some preinstalled extensions (JShelter being of interest but only helping to increase the fingerprintability of your browser). All I know about it is that it is a GNU drop-in Firefox replacement (since it is a fork), but it most likely doesn't enable privacy.resistFingerprinting or many of the other things available in the Firefox config. You will not have anonymity on your proposed setup, nor even using something like the arkenfox user.js which provides much better privacy and security than the loose defaults of Firefox. I would instead recommend Librewolf, or even better Mullvad browser.
I prefer opting for randomization over a deep quest for anonymity. I use various tools on different systems to randomize the aspects that are identifiable, and blocking what can analyze further, through firewall and network adblockers. I prefer to obfuscate rather than try to totally hide from everything.
A P2P application for anonymous communication. There's chat rooms, forums, the whole range of things, all peer-to-peer, all decentralized, all built with privacy and anonymity as a feature.
If you want an easy onboarding solution for nostr check out https://damus.io/
The cool thing is if you don't like the first app you try, there's dozens of others, and your data moves across all of them seamlessly. I started on iris and now I'm on nostrudel and I'll probably try out a few more over the next year before I really settle in to the best one for me.
If you have questions, check out !nostr@lemmy.world or use the #asknostr tag once you have your account setup, people are very helpful there!