Browser fingerprinting - relevance and countermeasures

Discussion in 'privacy general' started by summerheat, Jul 15, 2018.

  1. __Nikopol

    __Nikopol Registered Member

    Joined:
    Aug 13, 2008
    Posts:
    588
    Location:
    Germany
    Oops, you're right. :)

    I have some questions regarding fingerprinting in Firefox when using "privacy.resistFingerprinting": The window always seems to be one pixel too low. I mean, I have a screen size of 1366x768, unfortunately, but in fullscreen the browser/window size is 1366x767! Also non-maximized windows - that I use to increase entropy, sometimes - are defaulting to 1000x599. Why always one pixel too low?
    EDIT: It's this: When privacy.resistFingerprinting = true, set new windows to rounded dimensions [tor 19459] Guess the'll figure that out.
    Can I just go there and post this issue or should I do that somewhere else? Is that even an issue with their code? I mean they don't change the fullscreen-size, obviously. So why is it one pixel less there? gaaaah

    Also, very important: Newest Firefox totally blocks CanvasBlockers functionality when using "privacy.resistFingerprinting = true". Canvas readout will be blank and fingerprint never changes. I haven't read about that anywhere yet, so I think that is new.
    And I have no idea where to report that? In CanvasBlockers GituHub? In the bugzilla for resistFingerprinting? Somewhere else?
    :confused:
     
    Last edited: Oct 23, 2018
  2. summerheat

    summerheat Registered Member

    Joined:
    May 16, 2015
    Posts:
    1,553
    No, it's not. This has also been the case in previous FF versions. If you enable that setting,
    https://browserleaks.com/canvas
    reports:
    And this makes sense as you want to hide in that crowd.
     
  3. __Nikopol

    __Nikopol Registered Member

    Joined:
    Aug 13, 2008
    Posts:
    588
    Location:
    Germany
    I guess I only need it for the other fingerprinting methods it blocks, or does FF do that too?
     
  4. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,411
    Location:
    Italy
    The setting:

    "browser.display.use_document_fonts" set to 0

    recommended in the test:

    http://ip-check.info/?lang=en

    (ip-check.info script allowed)

    100.JPG

    prevents the display of the trash can in the UBO custom lists.

    Same problem for those using the ghacks-user.js.

    [SECTION 1400]: FONTS
     
    Last edited: Dec 24, 2018
  5. __Nikopol

    __Nikopol Registered Member

    Joined:
    Aug 13, 2008
    Posts:
    588
    Location:
    Germany
    My cans are visible. I checked that I have it set to 0. May be something else on your side.
     
    Last edited: Dec 25, 2018
  6. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,411
    Location:
    Italy

    http://sendvid.com/eplmq9o6

    Merry Christmas.:)
     
  7. __Nikopol

    __Nikopol Registered Member

    Joined:
    Aug 13, 2008
    Posts:
    588
    Location:
    Germany
    I can only tell you what I see. I have the newest version of both Firefox and uBlock. (And ghacks-user.js)
    Merry Christmas to you too :)
     
  8. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,411
    Location:
    Italy
    https://www.ghacks.net/2018/12/24/librefox-firefox-with-privacy-enhancements/#comments

    Read the comments:

    Better to disable this setting if the developer of Libre also recommends it.;):)
     
  9. __Nikopol

    __Nikopol Registered Member

    Joined:
    Aug 13, 2008
    Posts:
    588
    Location:
    Germany
    I HAVE set it to 0. I don't know why it works fine for me.
     
  10. summerheat

    summerheat Registered Member

    Joined:
    May 16, 2015
    Posts:
    1,553
    Here's an interesting and lengthy contribution regarding fingerprinting by gHacks user.js maintainer Thorin-Oakenpants.
     
  11. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,411
    Location:
    Italy
  12. summerheat

    summerheat Registered Member

    Joined:
    May 16, 2015
    Posts:
    1,553
    For me it does not unless I use the --disable-reading-from-canvas command-line switch.
     
Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.