Meet the Online Tracking Device That is Virtually Impossible to Block

Because this is one of many tracking/fingerprinting methods in the wild. Yes, it may be something that can be blocked or possibly altered, but if one method such as this one is blocked while another is permitted, that combination is itself a fingerprint, possibly a very unique fingerprint that's easily recognized.

 

True enough.

The Tor browser would be a better bet, right? By default it doesn't permit HTML5 canvas fingerprinting.

 

It's unlikely there will ever be anything that can't be blocked. You need scripts to execute, scripts need to be downloaded, at which point they can be blocked.

It's borderline madness to think a fresh VM would be needed every time you launch a browser.

 

That's true enough.

But the key is knowing when it is needed, and when it's far from sufficient.

 

I suspect it would be for some applications. I think every instance of "return pure white canvas image data" behavior would effectively have the same, currently-unique-to-Tor-Browser, canvas fingerprint.

 

I was thinking the same thing.

 

The hidden perils of cookie syncing.

-- Tom