I can't hide my browser plug-ins from browser fingerprint/leak test

Discussion in 'privacy problems' started by Brosephine, Jan 28, 2016.

  1. Brosephine

    Brosephine Registered Member

    Joined:
    Dec 4, 2015
    Posts:
    143
    Location:
    lo·ca·tion (noun) "a particular place or position"
    I'm using a random agent spoofer but many of my real add-on's still show through?
     
  2. inka

    inka Registered Member

    Joined:
    Oct 21, 2009
    Posts:
    406
    which browser and version are using?
    If firefox, the extension you're using to alter the user agent string
    might not be "trumping" the string stated in preference "general.useragent.override"
     
  3. Brosephine

    Brosephine Registered Member

    Joined:
    Dec 4, 2015
    Posts:
    143
    Location:
    lo·ca·tion (noun) "a particular place or position"
    Firefox 43 ad I'm using "User-agent switcher."
    This is new territory for me so I don't totally understand the "string" concept. My User-agent switcher does give me the option to "edit current user agent string or copy it to clipboard." Do I need to put the string "general.useragent.override"in there?
     
  4. marzametal

    marzametal Registered Member

    Joined:
    Mar 19, 2014
    Posts:
    732
    Ummm FF 43 does not have general.useragent.override... have to create it manually, or use a 3rd party app like AdGuard to do the agent and referrer spoofing for you.

    I think plugins shouldn't be your primary concern... run this test and see how many red lights you get...
    IP Check Info
     
  5. Brosephine

    Brosephine Registered Member

    Joined:
    Dec 4, 2015
    Posts:
    143
    Location:
    lo·ca·tion (noun) "a particular place or position"
    There were many red lights (including on plug-ins.)
    Do you recommend Jondo? Or is there another solution?
    Also, I checked out AdGuard and didn't see anything about user-agent spoofing?
     
  6. Brosephine

    Brosephine Registered Member

    Joined:
    Dec 4, 2015
    Posts:
    143
    Location:
    lo·ca·tion (noun) "a particular place or position"
    I have updated to FF 44 if that makes a difference.
     
  7. marzametal

    marzametal Registered Member

    Joined:
    Mar 19, 2014
    Posts:
    732
    Don't think it does. Somewhere in earlier FF versions, this specific about:config entry was deprecated.
     
  8. Sordid

    Sordid Registered Member

    Joined:
    Oct 25, 2011
    Posts:
    221
    Plugins are not enumerated via user-agent which appears like this as an example:
    Mozilla/5.0 (iPad; U; CPU OS 3_2_1 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Mobile/7B405

    Note there is no plugin data present.

    It's done via JavaScript.

    With that realised, if you change your UA-string, you likely break the fingerprint/tracking. Or turn off scripting.
     
  9. Stefan Froberg

    Stefan Froberg Registered Member

    Joined:
    Jul 30, 2014
    Posts:
    108
    Like Sordid said, plugins enumeration is done with JavaScript and is extremenly trivial to do.
    Here's test code:

    HTML:
    <html>
    <head>
    <script type="text/javascript">
        window.onload = function()
        {
            var    s = "<table border=\"1\"><tr><th>Name</th><th>Description</th><th>Filename</th></tr>";
            for(var i = 0;i < navigator.plugins.length;++i) {
                s += "<tr><td>" + navigator.plugins.name + "</td><td>" + navigator.plugins.description + "</td><td>" + navigator.plugins.filename + "</td></tr>";
            }
            s += "</table>";
            document.write(s);
        }
    </script>
    </head>
    <body>
    </body>
    </html>
    Saving that code to some file (like plugin_test.html) and opening it in your browser will show ur plugins.
    AFAIK, at least Tor browser does the right thing and disables navigator.plugins enumeration completely so this test code won't show anything.
     
  10. Palancar

    Palancar Registered Member

    Joined:
    Oct 26, 2011
    Posts:
    1,599
    Plus I like how the TBB pops up a warning when "canvas fingerprinting" is blocked. Its amazing how many places try to do this to their visitors. Whonix/TOR is so much safer for me than anything I could configure on my own. I just have to admit it and stop trying to be a hero with self-configuration. Strong extra point is I blend in by appearing like all other Tor bundle users, which is a nice plus.
     
  11. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,030
Loading...