Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

No-JavaScript Fingerprinting

noscriptfingerprint.com

Post reply on HN
Print view View original

31–40 of 107 posts

Re: No-JavaScript Fingerprinting

#32

Post by ravenstine »

Cool. I get a different fingerprint every time. Although that doesn't prove that I'm not fingerprintable by this approach (one difference may be responsible for changing the hash), I'm kind of pleased.

My setup:

- Firefox

- Enhanced Tracking Protection

- uBlock Origin

- NoScript

- Privacy Badger

- Privacy Possum

- HTTPS Everywhere

- Clear URLs

- Decentraleyes

- Smart Referer

- JavaScript Restrictor

Re: No-JavaScript Fingerprinting

#33

Post by tpfour »

easrng wrote: post #30
tpfour wrote: post #23

Earlier quoted context omitted.

Ok sure, but how does it work? I clicked around your website but there doesn't seem to be a description.

I haven't written a description yet. Here's a diagram I just made (I'm on my phone rn, please forgive any spelling issues) https://owo.whats-th.is/56opvAS.html

Thank you, interesting!

Re: No-JavaScript Fingerprinting

#36

Post by HWR_14 »

NavinF wrote: post #12
alkonaut wrote: post #3

This doesn’t worry me too much, the value seems like it should be the exact same hash for any iOS Safari visitor with the same screen resolution and browser language? I’d be fingerprinted as part of a group of (probably) several hundred thousand. 8d666b05c42878d6d6d364c410a4eef2 It’s a shame that browsers leak things like font presence, but of course when sites can read back canvas contents without querying the user…

Chrome (Safari) on iPhone 13 Pro Max: db9df4c8c770242aaf1e0efdd5cf8ab2 There’s likely enough info in the hash to figure out exactly what device I’m on since nothing else will have the same pixel density, screen height, and screen width: https://stackoverflow.com/questions/46313640/iphone-x-8-8-pl... Dark mode adds on one more bit, but everything else should be the same across iOS devices. Not sure if that’s enough to…

I'm pretty sure the Pro Max 12 has the same screen settings. I also wonder about maximized windows on a 1080p monitor. I know DPI of desktop monitors at one point was a constant returned value.

Re: No-JavaScript Fingerprinting

#38

Post by lelandfe »

ravenstine wrote: post #32

Cool. I get a different fingerprint every time. Although that doesn't prove that I'm not fingerprintable by this approach (one difference may be responsible for changing the hash), I'm kind of pleased. My setup: - Firefox - Enhanced Tracking Protection - uBlock Origin - NoScript - Privacy Badger - Privacy Possum - HTTPS Everywhere - Clear URLs - Decentraleyes - Smart Referer - JavaScript Restrictor

Not familiar with Privacy Badger or Privacy Possum, but I'm guessing they are what's subverting this technique? The other ones probably don't come into play.

Re: No-JavaScript Fingerprinting

#40

Post by 1vuio0pswjnm7 »

lelandfe wrote: post #37
1vuio0pswjnm7 wrote: post #35

The text-only browser I am using does not support CSS. It does not send E-tag headers either. The local forward proxy removes all HTTP headers except Host and Connection, and Cookie where needed.

Do you generally have a good time on the web with that?

Yes. It is a relief from the times I must use the graphical browsers.

For example, I can search for and consume information much faster and more efficiently, free from distraction.

Perhaps one needs more than one client for the web. For example, I need a netcat-like program, some helper programs for working with HTTP and a text-only browser for viewing HTML. Plus a TLS proxy to deal with all the HTTPS. This is in addition to graphical, everything-but-the-kitchen-sink desktop or mobile browsers.

Perhaps a single, large, graphical browser directly or indirectly funded by advertisers is insufficient for all web use. Other clients may work better in certain situations. Certainly this is true for me. The smaller programs are faster, more robust and offer me greater flexibility.

Post reply on HN