I can't hide my browser plug-ins from browser fingerprint/leak test

Discussion in 'privacy problems' started by Brosephine, Jan 28, 2016.

  1. Brosephine

    Brosephine Registered Member

    Joined:
    Dec 4, 2015
    Posts:
    181
    Location:
    Metropolis
    I'm using a random agent spoofer but many of my real add-on's still show through?
     
  2. inka

    inka Registered Member

    Joined:
    Oct 21, 2009
    Posts:
    426
    which browser and version are using?
    If firefox, the extension you're using to alter the user agent string
    might not be "trumping" the string stated in preference "general.useragent.override"
     
  3. Brosephine

    Brosephine Registered Member

    Joined:
    Dec 4, 2015
    Posts:
    181
    Location:
    Metropolis
    Firefox 43 ad I'm using "User-agent switcher."
    This is new territory for me so I don't totally understand the "string" concept. My User-agent switcher does give me the option to "edit current user agent string or copy it to clipboard." Do I need to put the string "general.useragent.override"in there?
     
  4. marzametal

    marzametal Registered Member

    Joined:
    Mar 19, 2014
    Posts:
    766
    Ummm FF 43 does not have general.useragent.override... have to create it manually, or use a 3rd party app like AdGuard to do the agent and referrer spoofing for you.

    I think plugins shouldn't be your primary concern... run this test and see how many red lights you get...
    IP Check Info
     
  5. Brosephine

    Brosephine Registered Member

    Joined:
    Dec 4, 2015
    Posts:
    181
    Location:
    Metropolis
    There were many red lights (including on plug-ins.)
    Do you recommend Jondo? Or is there another solution?
    Also, I checked out AdGuard and didn't see anything about user-agent spoofing?
     
  6. Brosephine

    Brosephine Registered Member

    Joined:
    Dec 4, 2015
    Posts:
    181
    Location:
    Metropolis
    I have updated to FF 44 if that makes a difference.
     
  7. marzametal

    marzametal Registered Member

    Joined:
    Mar 19, 2014
    Posts:
    766
    Don't think it does. Somewhere in earlier FF versions, this specific about:config entry was deprecated.
     
  8. Sordid

    Sordid Registered Member

    Joined:
    Oct 25, 2011
    Posts:
    235
    Plugins are not enumerated via user-agent which appears like this as an example:
    Mozilla/5.0 (iPad; U; CPU OS 3_2_1 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Mobile/7B405

    Note there is no plugin data present.

    It's done via JavaScript.

    With that realised, if you change your UA-string, you likely break the fingerprint/tracking. Or turn off scripting.
     
  9. Stefan Froberg

    Stefan Froberg Registered Member

    Joined:
    Jul 30, 2014
    Posts:
    747
    Like Sordid said, plugins enumeration is done with JavaScript and is extremenly trivial to do.
    Here's test code:

    HTML:
    <html>
    <head>
    <script type="text/javascript">
        window.onload = function()
        {
            var    s = "<table border=\"1\"><tr><th>Name</th><th>Description</th><th>Filename</th></tr>";
            for(var i = 0;i < navigator.plugins.length;++i) {
                s += "<tr><td>" + navigator.plugins.name + "</td><td>" + navigator.plugins.description + "</td><td>" + navigator.plugins.filename + "</td></tr>";
            }
            s += "</table>";
            document.write(s);
        }
    </script>
    </head>
    <body>
    </body>
    </html>
    Saving that code to some file (like plugin_test.html) and opening it in your browser will show ur plugins.
    AFAIK, at least Tor browser does the right thing and disables navigator.plugins enumeration completely so this test code won't show anything.
     
  10. Palancar

    Palancar Registered Member

    Joined:
    Oct 26, 2011
    Posts:
    2,402
    Plus I like how the TBB pops up a warning when "canvas fingerprinting" is blocked. Its amazing how many places try to do this to their visitors. Whonix/TOR is so much safer for me than anything I could configure on my own. I just have to admit it and stop trying to be a hero with self-configuration. Strong extra point is I blend in by appearing like all other Tor bundle users, which is a nice plus.
     
  11. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.