HTML5 Canvas Fingerprinting

Discussion in 'privacy general' started by Sampei Nihira, May 30, 2016.

  1. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,210
    Location:
    Among the gum trees
    Yes, but check my edit above.
     
  2. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    97,440
    Location:
    U.S.A.
    Has to be tied to a session date then. Thanks for checking!
     
  3. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,210
    Location:
    Among the gum trees
    :thumb: I've gabbed a screenshot of the current noise so I'll check tomorrow morning my time and see if it has changed or not.

    Thanks.
     
  4. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    97,440
    Location:
    U.S.A.
    Great! :thumb: It will be settled tomorrow... one way or another! :D
     
  5. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,210
    Location:
    Among the gum trees
    Yeah, if it changes daily I'll be OK with that.
     
  6. guest

    guest Guest

    If i look at data\js\index.js i see:
    Code:
    if (storageData == undefined) {
        dataHash = generateNewFingerPrint();
        notifyUser("New canvas noise hash #" + dataHash);
    
    if nothing is in the local storage(?) (storageData == undefined), the addon is generating a new one - "New canvas noise hash"
    Code:
    } else {
        data = JSON.parse(storageData);
        dataHash = md5(storageData);
        notifyUser("Current canvas noise hash #" + dataHash);
    
    If the addon can find a previous one, it's only displaying it and isn't generating a new one - "Current canvas noise hash"

    I don't know where exactly, but the fingerprint is saved "somewhere". If CCleaner is being used, the fingerprint is then deleted and the addon is generating a new one.
     
  7. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Right, but the argument is that blocking canvas fingerprinting is itself a fingerprint ;)
     
  8. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,210
    Location:
    Among the gum trees
    Did you read my edit?
     
  9. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,210
    Location:
    Among the gum trees
    What I find interesting is it says here, "When installed and configured...", what is configured? The only thing I can configure is how the extension updates. :doubt:
     
  10. guest

    guest Guest

    Now i made screenshots of my fingerprints (chrome/firefox). After a reboot i'm gonna see if it has changed (or not) :cautious:
    But i keep an eye on it for the next reboots/days ;)
     
  11. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    97,440
    Location:
    U.S.A.
    Was perplexed by that statement as well, since I don't see any type of control panel to configure. :doubt:
     
  12. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,881
    Location:
    Slovenia, EU
    More users will use it, more users will have the same "fingerprint" :)
     
  13. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,345
    Location:
    Italy
    CanvasBlocker on Firefox (Javascript on):

    1.JPG

    Restart browser:

    2.JPG
     
  14. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,210
    Location:
    Among the gum trees
    https://multiloginapp.com/how-canvas-fingerprint-blockers-make-you-easily-trackable/

    So it sounds better not to have the fingerprint change too often. It also sounds like it might be up to CanvasDefender users to manually change the "noise" when required. I will see tomorrow morning if mine has automatically changed.
     
  15. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    97,440
    Location:
    U.S.A.
    Well, mine did not change:

    2016-06-05_085813.png

    And I see where "my" confusion came from. I also have CanvasDefender in Google Chrome Portable 51.0.2704.79, and that has a different "noise" that my Firefox Beta. I kept seeing 2 different fingerprints, and though they were changing. My mistake!

    I checked the above hash at BrowserLeaks.com, and the fingerprint is still unique. I guess that's all that counts.
     
  16. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,210
    Location:
    Among the gum trees
    Yep, same here.
     
  17. DenMLA

    DenMLA Registered Member

    Joined:
    Jun 6, 2016
    Posts:
    9
    Location:
    Estonia
    Hey everyone. I am from the team developed Canvas Defender browser extension.

    First of all, thank you for your interest towards our extension.

    Let me clarify how it works:
    1. On the first launch a unique noise is generated, which masks your real Canvas fingerprint
    2. On any consequent launch the same noise will be used unless you click "Generate new canvas noise" button.

    In the next version we are going to add an option to renew fingerprint on every browser launch. We will also remove notification window, which some users consider annoying. If you have any other feature suggestions, please let me know or send them directly to support on MultiLoginApp website.

    Some of the questions presented above in this thread were also discussed here under user "PryvacyFreak" comment https://www.reddit.com/r/firefox/comments/4lc84i/how_effective_is_creating_separate_profiles/
     
  18. liba

    liba Registered Member

    Joined:
    Jan 21, 2016
    Posts:
    344
    please block this


    webgl fingerprint:
    WebGLRenderingContext
    WebGLShader
    WebGLTexture
    WebGL2RenderingContext

    audiocontext fingerprint:
    webkitAudioContext
    OfflineAudioContext
    AudioContext
    webkitAudioContext
    createDynamicsCompressor
    createOscillator
    OscillatorNode
    webkitOfflineAudioContext


    webrtc and webrtc unique devices id's:
    MediaStreamTrack
    RTCSessionDescription
    RTCDataChannel
    webkitRTCPeerConnection
    RTCPeerConnection

    battery status api:
    getBattery
     
  19. yeL

    yeL Registered Member

    Joined:
    Aug 10, 2015
    Posts:
    280
    Something that i miss on your extension is the ability to see when a website is reading something from the canvas. With the CanvasFingerprintBlock extension i can see which websites are reading from it and which objects.
     
  20. Cache

    Cache Registered Member

    Joined:
    May 20, 2016
    Posts:
    445
    Location:
    Mercia
    I agree yeL. I have been using CanvasBlocker with Firefox until today and am missing the ability to see which sites are trying to track me via my canvas profile.

    @DenMLA I appreciate your feedback and link to the Reddit thread. Perhaps you could pass on our comments on this aspect to the developers.
     
  21. DenMLA

    DenMLA Registered Member

    Joined:
    Jun 6, 2016
    Posts:
    9
    Location:
    Estonia
    There are enough tools on the market that block features, which may lead to you being tracked by websites. However, blocking such features completely creates a fingerprint in itself and it's only a matter of time when websites will start tracking users by what they have blocked (some already do, e.g. websites that "know" that you are using AdBlock)

    Foreseeing this problem, we as developers focus on spoofing different variables instead of blocking websites from reading them. I will pass your list to other team members. Audio spoofing is already on our to-do list.
     
  22. DenMLA

    DenMLA Registered Member

    Joined:
    Jun 6, 2016
    Posts:
    9
    Location:
    Estonia
    Sounds reasonable, will add this to the development que
     
  23. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,453
    Location:
    .
    ? Your Canvas Fingerprint appears to be unique for our database.
    and BrowserLeaks knows me better that me. :(
     
    Last edited: Jun 6, 2016
  24. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,210
    Location:
    Among the gum trees
    I wouldn't mind an option of changing the noise daily as well.
     
  25. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    97,440
    Location:
    U.S.A.
    DenMLA, welcome to Wilders! Thank you for letting us know of your future developments.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.