[Boards: 3 / a / aco / adv / an / asp / b / biz / c / cgl / ck / cm / co / d / diy / e / fa / fit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mu / n / news / o / out / p / po / pol / qa / r / r9k / s / s4s / sci / soc / sp / t / tg / toy / trash / trv / tv / u / v / vg / vp / vr / w / wg / wsg / wsr / x / y ] [Home]
4chanarchives logo
Fingerprinting Thread
Images are sometimes not shown due to bandwidth/network limitations. Refreshing the page usually helps.

You are currently reading a thread in /g/ - Technology

Thread replies: 35
Thread images: 6
File: 4chan.names.png (52 KB, 652x480) Image search: [Google]
4chan.names.png
52 KB, 652x480
https://browserprint.info/
https://panopticlick.eff.org/
http://ip-check.info
http://browserleaks.com/
http://browserspy.dk/

Fingerprinting is the newest way of tracking you across websites.
It's being done right now by companies like Google.
Because unlike cookie based tracking you can't defeat it just by disabling cookies.
There is currently NO FOOLPROOF DEFENCE against fingerprinting (except quitting the Internet).

Google's privacy policy states
>Other technologies are used for similar purposes as a cookie on other platforms where cookies are not available or applicable
https://www.google.com/intl/en/policies/privacy/key-terms/#toc-terms-cookie

ReCAPTCHA probably contains fingerprinting code:
https://archive.is/9K5gs
This means that the majority of 4chan users could be being fingerprinted, and Google might know about your shitposting habits even if cookies are disabled.

Google releases limited hangout of how much they know about you:
https://news.slashdot.org/story/16/06/29/2038257/googles-my-activity-reveals-how-much-it-knows-about-you
>Oh, they're just remembering what YouTube videos I watched, nothing creepy about that, I already knew they were doing it!
>I guess all those people who fear tracking really are just conspiracy theorists!

Daily reminder to do all your Amazon / eBay / LinkedIn / botnet shit in a completely separate browser to your Googling or buying shit.
It's currently the ONLY way to truly defend against fingerprint tracking.
Double points if you have each browser running in a different VM with a different OS.
Triple points if you have each browser's VM configured with a different VPN connection.

Could the FP-Block browser extension be exactly what we're looking for?
Too bad it's unstable as fuck.
http://satoss.uni.lu/software/fp-block/
>>
https://addons.mozilla.org/en-US/firefox/addon/no-canvas-fingerprinting/?src=ss
>>
>>55579766
>Not available for Firefox 36.0
Damnit.
I should probably switch back from IceCat to Firefox
>>
>>55573484
Check the statistics page of Browserprint.info to see what the most common screen sizes are.
>>
File: fetish.png (30 KB, 650x500) Image search: [Google]
fetish.png
30 KB, 650x500
>>55574186
Degenerate
>>
>>55575681
That would work to a point.
Stuff like AudioContext fingerprints could still be used to track you.
>>
>>55579798

1. Current IceCat is 38.8.0

2. Check the version history for compatible versions, though even the latest one works with my IceCat.
>>
>>55575681
>>55579911

No, most fingerprinting sites I've seen (about two or three) even have a category of identity for TOR users, and since TOR uses FF as a base, you are still being narrowed down, though to what extent I don't know.
>>
File: .jpg (897 KB, 1218x3940) Image search: [Google]
.jpg
897 KB, 1218x3940
>>55579723
anyone got the pic showing how captcha tracks you and gives you /pol/ related videos on youtube without any cookies?
>>
File: trackingExperiment.jpg (400 KB, 1283x2671) Image search: [Google]
trackingExperiment.jpg
400 KB, 1283x2671
>>55579952
I think he had cookies enabled for this though.
It's just proof of tracking in general
>>
>>55580004
thanks
>I think he had cookies enabled for this though.
he didn't, i was the one who told him about it since i had already done the experiment
>>
>>55579766
>You have to manually click a button to rerandomise your canvas.
That kinda limits its usefulness
>>
>>55580004
i can't reproduce this at all. i won't believe it until i see a video
>>
>>55580051

No. The way it works is that everytime your browser is started up, you get a new hash. You keep the same hash for the whole browsing session until you quit the browser (or it is restarted). When you open the browser again, you have a different hash.

Its explanation is that it's trerribly supsicious for you to be constantly changing hashes like that (using one for each site you visit, meaning multiple ones for one session, for instance), and only serves to point you out even more. The effect of /this/ system is that you build up one identity only to discard it for a new one later on.

It's apparently the best way to beat this as of yet.
>>
>>55580073
Yeah I can't reproduce it without cookies either.
Works every time with cookies though.
>>
>>55579952
>>55580004
>>55580025
>>55580073

https://addons.mozilla.org/en-US/firefox/addon/clear-console/?src=ss
https://addons.mozilla.org/en-US/firefox/addon/betterprivacy/?src=ss

These two addons always let me reset the YouTube history easily. I don't know if it's cookies they use or what to track you, but you can test it. The point is that nuking everything sure as hell works.
>>
>>55580073
>>55580089
if you're using noscript captcha it won't work
anyways now i think that idiot did leave on his cookies, you wouldn't get anything in the front page when i did the experiment either
you're supposed to click on a few videos and you'll get a "recommended for you" from infowars about trump or hillary, that's how it works
>>
>>55580150
>you're supposed to click on a few videos and you'll get a "recommended for you" from infowars about trump or hillary, that's how it works
That might explain why people have been having trouble doing it without 3rd party cookies.
They're trying to conceal their fingerprinting by making the recommendations less obvious
>>
>>55580124
>Clear Console by Rejah Rehim A A, Sreenath Sasikumar
>downloading a pajeetware extension instead of just pressing ctrl+shift+delete
>>
>>55580150
oh and i forgot you can also get a video from the it's the current year man or a video from the daily show
>>55580177
yeah absolutely, they won't show you anything in the front page and i did it dozens of times but those exact recommended videos always appear alongside the stream if you posted with the captcha before going to youtube
>>
>>55579766
>>55579798
>>55580051
Use this instead.
https://addons.mozilla.org/en-US/firefox/addon/canvasblocker
>>
>>55580182

If there's anything malware about an extension they have to give warning signs in the form of a Privacy Policy or EULA right there in the box. An easy way to tell if something is malware is to look in the comment section, where you will see one stars and shouting if so.

The "Indians" make a decent amount of good software. One example:

https://addons.mozilla.org/en-US/firefox/addon/copy-urls-expert/?src=ss
>>
>>55580223

"Thought your canvas fingerprint blocker made you incognito? Think again.

... when it comes to canvas fingerprinting, things are not so cut-and-dry. In fact, believe it or not, using a canvas fingerprint blocker can actually make you more trackable than if you weren’t using one. That statement defies common sense, but it’s true."

https://multiloginapp.com/how-canvas-fingerprint-blockers-make-you-easily-trackable/

Don't do it.
>>
>>55580293
>blog post promoting their own add-on
Seems like a reliable source
>>
>>55580248
>The "Indians" make a decent amount of good software
>The "Indians"
>good software
hahahahhahaha oh man. That was a good one
>>
>>55580390

I meant software for FF—i.e., addons.

>>55580345

Sure seems like the kind of thing someone would bother lying about, doesn't it?
>>
>>55574283
>https://wiki.mozilla.org/Security/Tor_Uplift/Tracking
Wow. That's actually reasonable and responsible of them. Not what I've come to expect lately, but a welcome step forward.
>>
>>55575681
It sure doesn't stop the NSA.
>>
>>55580429
>would bother lying about
People come to this website exclusively to lie for fun, let alone profit like that guy.
>>
File: WHAT, SON - 7.jpg (94 KB, 854x480) Image search: [Google]
WHAT, SON - 7.jpg
94 KB, 854x480
>>55580843

>shitposting on /g/ is the same as programming a privacy extension for FF
>you can make money off said extension without including ads or even asking for donations

Explain to me how the programmer of this addon "profits" from people using it.
>>
File: raptors-ahead.1233766702795.jpg (27 KB, 600x338) Image search: [Google]
raptors-ahead.1233766702795.jpg
27 KB, 600x338
jump
>>
>>55579952
So basically you can RSS feed from a user on nyaa? how do you get rss feeds for users on nyaa?
>>
So how does that shit work?
>>
>>55582878
its javascript mainly

without javascript allowed on the site your useragent string, http headers and installed fonts (for me anyway using linux) are the big ones

seems unavoidable to some extent without crippling functionality for a normie user
>>
>>55582878
You visit a site.
The site collects information you send it normally such as HTTP headers.
The site collects additional data about your browser and computer by poking you with CSS and JavaScript.
The site can now uniquely identify you based on all the data it collected about you.
The site then shares this description of you with other sites and tells them everything you did on their website so that the other sites know.
Thread replies: 35
Thread images: 6

banner
banner
[Boards: 3 / a / aco / adv / an / asp / b / biz / c / cgl / ck / cm / co / d / diy / e / fa / fit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mu / n / news / o / out / p / po / pol / qa / r / r9k / s / s4s / sci / soc / sp / t / tg / toy / trash / trv / tv / u / v / vg / vp / vr / w / wg / wsg / wsr / x / y] [Home]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
If a post contains personal/copyrighted/illegal content you can contact me at [email protected] with that post and thread number and it will be removed as soon as possible.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com, send takedown notices to them.
This is a 4chan archive - all of the content originated from them. If you need IP information for a Poster - you need to contact them. This website shows only archived content.