Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Underpants Project

lab.cubiq.org

Post reply on HN
Print view View original

11–20 of 87 posts

Re: The Underpants Project

#12

Post by brudgers »

franciscoapinto wrote: post #6
brudgers wrote: post #3

Earlier quoted context omitted.

*The following is your unique fingerprint on the web:* *loading...* I'll bet my fingerprint isn't unique.

https://panopticlick.eff.org/ You'd be surprised.

Not really.

Currently, we estimate that your browser has a fingerprint that conveys 11.9 bits of identifying information.

Re: The Underpants Project

#14

Post by robterrell »

You can view source to see what they're using to generate the fingerprint: screenSize, devicePixelRatio, timezone, mimeTypes, plugins, httpAcceptHeaders, fonts. It's interesting that these are enough to generate a moderately unique fingerprint. I'm sure my fonts list is unique, so that's probably enough to ID me right there. However, not every computer I use has the same fonts installed, nor the same screen dimensions. This won't track me as I go from my desktop to mobile device.

Re: The Underpants Project

#15

Post by 5h »

king_magic wrote: post #11

I really question the name of this. Underpants Project? I just don't get it. It doesn't really fit with the point you're trying to make, IMO.

"Caught with your pants down" is the best I could come up with

Re: The Underpants Project

#16

Post by robterrell »

DanielBMarkham wrote: post #13

Does anybody know of a browser plug-in that attempts to defeat fingerprinting?

This fingerprinting can be defeated by NoScript. Or by turning off JavaScript. A sensible idea would be to make an extension that purges the unique elements from the set they're tracking (i.e. fonts, plugins, mimeTypes, screen size and pixel ratio, etc.) and provide a white-list for sites you want to have that information.

Re: The Underpants Project

#18

Post by robfig »

Can anyone explain what use-case this technique enables that is not served by cookie tracking?

Or is the point that disabling cookies is not sufficient to avoid being tracked? Everyone has cookies enabled (or many sites don't work), so if that's all it is, nbd..

Re: The Underpants Project

#19

Post by nodata »

robterrell wrote: post #14

You can view source to see what they're using to generate the fingerprint: screenSize, devicePixelRatio, timezone, mimeTypes, plugins, httpAcceptHeaders, fonts. It's interesting that these are enough to generate a moderately unique fingerprint. I'm sure my fonts list is unique, so that's probably enough to ID me right there. However, not every computer I use has the same fonts installed, nor the same screen dimension…

I think the font question was answered by http://panopticlick.eff.org/
Post reply on HN