Favicons may be used to track users

Discussion in 'privacy problems' started by stapp, Jan 22, 2021.

  1. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    24,107
    Location:
    UK
  2. Floyd 57

    Floyd 57 Registered Member

    Joined:
    Mar 17, 2017
    Posts:
    1,296
    Location:
    Europe
    Already 1 billion other ways to track you, altho curious if this works for Tor. Prob not since not included, heh
     
  3. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Wow. I remember when this little ditty was researched as a possible tracking method stretching way back on Windows 98.

    Guess when they exhausted all their ideas with the current Windows version they can always backtrack archives of older versions to implement to their likings.
     
    Last edited: Jan 22, 2021
  4. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,367
    Location:
    Italy
    FF hardening has been considering this "problem" for a long time.
    In fact the Arkenfox.js to the line 602 has a section devoted to it:


    https://github.com/arkenfox/user.js/blob/master/user.js

    Code:
    /** FAVICONS ***/
    /* 1030: disable favicons in shortcuts
     * URL shortcuts use a cached randomly named .ico file which is stored in your
     * profile/shortcutCache directory. The .ico remains after the shortcut is deleted.
     * If set to false then the shortcuts use a generic Firefox icon ***/
    user_pref("browser.shell.shortcutFavicons", false);
    /* 1031: disable favicons in history and bookmarks
     * Stored as data blobs in favicons.sqlite, these don't reveal anything that your
     * actual history (and bookmarks) already do. Your history is more detailed, so
     * control that instead; e.g. disable history, clear history on close, use PB mode
     * [NOTE] favicons.sqlite is sanitized on Firefox close, not in-session ***/
       // user_pref("browser.chrome.site_icons", false);
    /* 1032: disable favicons in web notifications ***/
    // user_pref("alerts.showFavicons", false); // [DEFAULT: false]
     
  5. SouthPark

    SouthPark Registered Member

    Joined:
    Jun 13, 2012
    Posts:
    737
    Location:
    South Park, CO
    Favicon tracking is already partially addressed in Fanboy's Enhanced Tracking List for uBO and ABP:

    Code:
    ! favicon tracking
    /favicon.ico$image,third-party,domain=~apple.com|~douban.com|~bahn.de|~winfuture.de|~bt.com|~ebay.com.au|~ebay.com|~ebay.co.uk|~go.com|~github.com|~microsoft.com|~stackexchange.com|~stackoverflow.com|~askubuntu.com|~reddit.com|~4chan.org|~twitter.com|~live.com|~espn.com|~yahoo.com
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.