101–110 of 118 posts
You need tracker blocking extensions, and/or a "degoogled" version of Chrome like Thorium or Brave. My usual loadout is Thorium + the EFF's Privacy Badger extension, and sometimes UBO.
Extensions are blocked for "security and privacy concerns", and our internal systems don't work well with non standard browsers for some reason
You need tracker blocking extensions, and/or a "degoogled" version of Chrome like Thorium or Brave. My usual loadout is Thorium + the EFF's Privacy Badger extension, and sometimes UBO.
Extensions are blocked for "security and privacy concerns", and our internal systems don't work well with non standard browsers for some reason
There are also experimental Windows builds of Bromite (another Chrome fork that is very close to Chromium, but with a light built-in adblocker.)
https://github.com/uazo/bromite-buildtools#test-windows-vers...
Cookies was a simple concept that politicians could glom on to and legislate around, but, yes, they're quite unimportant in the grand scale of things. In the end, you've got two things to work with: Things you can convince the browser to actively identify itself with, and the things you can track regardless. Cookies are in the first category, but they are not alone. You can get things as simple as presenting an entir…
Earlier quoted context omitted.
This is a critical thing that so many miss. If somebody has a website that doesn't use any cookies, but does send a POST request to www.bigcompanyanalytics.com/send-user-info with a body containing user-identifying information, then that is still illegal if the user has not consented to analytics (if they are in an area that requires opt-in for analytics). Cookies aren't really mentioned in GDPR or other privacy laws…
How does that work given that web servers have request logs that capture some identifying info? You already know some things about the user before you can even serve them the consent popup.
A web server’s logs may include the IP and http request they’ve made, but once you start attaching that to an identity instead it might count as data processing.
Earlier quoted context omitted.
I’ve been on a team doing fingerprinting research (specifically entropy sources). It’s amusing that you’re 100% unique and browsing HN commenting about fingerprinting. (You’re exactly a demographic that would be unique.) Most people aren’t unique, far from it. Consider iPhone 14 Pro Max users browsing through a 5G connection. All the users in the same cell look exactly the same. If I had to guess, based on what I kno…
I tried the amiunique fingerprinter with my iPhone, software updated to the latest version, stock Safari browser, and it said I was unique among all however many users had tried before.
There are a few studies that used sites like that and got lots of traffic (by advertising on sites like HN) from non-normal users.
There was a landmark study done in France that measured fingerprints through a government website. The general population was much less unique.
Edit: found the AmIUnique paper: https://scholar.google.com/scholar_lookup?journal=Proceeding...
Earlier quoted context omitted.
I’ve been on a team doing fingerprinting research (specifically entropy sources). It’s amusing that you’re 100% unique and browsing HN commenting about fingerprinting. (You’re exactly a demographic that would be unique.) Most people aren’t unique, far from it. Consider iPhone 14 Pro Max users browsing through a 5G connection. All the users in the same cell look exactly the same. If I had to guess, based on what I kno…
I’m pretty skeptical of this of this fingerprint test. I’m on a 5G connection, in a major city with a completely default current gen iPhone, and it seems to think I’m 100% unique. Which I don’t believe for a second.
Fingerprinting. Everything about you that isn't identical to everyone else can be combined to guess who you likely are. Your exact browser version, OS, supported APIs, your IP address, your latency to Google servers... Anything that isn't a complete match to everyone else. You may have a new install, but your IP and latency match your old install. What are the odds you're not the same person? It's all probabilistic.…
You need tracker blocking extensions, and/or a "degoogled" version of Chrome like Thorium or Brave. My usual loadout is Thorium + the EFF's Privacy Badger extension, and sometimes UBO.
- Your DNS server is relevant, especially if it's google's or cloudflare's or youe ISP's DNS
- ETags can be used like fingerprints
- LastModified can also be used for fingerprints
- Pragma can be abused for long-living fingerprints in your Browser Cache
- AdMob has ultrasonic support. Not kidding, ads can be delivered to your phone while you watch TV - via unhearable sound signals. [1] usually called uXDT or XDT.
- Chrome has multicast DNS support to discover surrounding devices (and Browser instances). Check DNS-SD for details, and what can be discovered.
- Also the data for Chrome's locally trained neural net (aka FLoC) is inside the profile folder but won't be cleared with Browser History.
- (unlikely) TLS fingerprint is usually coupled with User-Agent on the server side, so rotating your User-Agent is pointless if you don't change the TLS fingerprint (which you can't without recompiling the Browser Engine).
Welcome to the new world. I miss the good ol' HTTP/1.1 days.
[1] (German) https://de.m.wikipedia.org/wiki/Cross-Device_Tracking
I've noticed Google now syphons data from my searches to feed my youtube recommendations, always felt like two separate systems until about a month ago.
I was wondering about that, but I wasn't sure it was new. Are you using YouTube Premium?
Seeing things I search for on google, like very unrelated to normal YT viewing like specific tech queries show on YT.