Supercookie: Browser Fingerprinting via Favicon (2021)

#1

Post by vxvrs » Sun, Nov 16, 2025, 7:39 PM UTC

Supercookie: Browser Fingerprinting via Favicon (2021)
github.com

Re: Supercookie: Browser Fingerprinting via Favicon (2021)

#2

Post by breppp » Sun, Nov 16, 2025, 8:21 PM UTC

I was sure this has been a thing for a while, either that or safari has a UI bug since forever.

I regularly get the wrong favicon in specific sites, for example ars technica favicon in reddit

Re: Supercookie: Browser Fingerprinting via Favicon (2021)

#3

Post by robotnikman » Sun, Nov 16, 2025, 8:23 PM UTC

breppp wrote: post #2

I was sure this has been a thing for a while, either that or safari has a UI bug since forever. I regularly get the wrong favicon in specific sites, for example ars technica favicon in reddit

I get the same bug in Firefox as well sometimes.

Re: Supercookie: Browser Fingerprinting via Favicon (2021)

#4

Post by gitmagic » Sun, Nov 16, 2025, 8:24 PM UTC

What is the live demo supposed to do? I just get stuck in an endless redirect loop with a counter going from 1 to 18 and then restarting. I’m using Safari on iOS.

Re: Supercookie: Browser Fingerprinting via Favicon (2021)

#5

Post by dizhn » Sun, Nov 16, 2025, 8:31 PM UTC

gitmagic wrote: post #4

What is the live demo supposed to do? I just get stuck in an endless redirect loop with a counter going from 1 to 18 and then restarting. I’m using Safari on iOS.

Android/Firefox it showed me my unique ID after the first 18. Then there was a button to try again ans that put me in the same loop you're having.

Re: Supercookie: Browser Fingerprinting via Favicon (2021)

#6

Post by zzo38computer » Sun, Nov 16, 2025, 8:35 PM UTC

Does it work if you disable favicons? (I disabled favicons when I set up the computer, but for a different reason; it is a feature that I don't use.)

Re: Supercookie: Browser Fingerprinting via Favicon (2021)

#7

Post by int0x29 » Sun, Nov 16, 2025, 8:40 PM UTC

dizhn wrote: post #5

gitmagic wrote: post #4

What is the live demo supposed to do? I just get stuck in an endless redirect loop with a counter going from 1 to 18 and then restarting. I’m using Safari on iOS.

Android/Firefox it showed me my unique ID after the first 18. Then there was a button to try again ans that put me in the same loop you're having.

FireFox for Android private browsing mode gets stuck in the loop 100% for me

Re: Supercookie: Browser Fingerprinting via Favicon (2021)

#8

Post by soulofmischief » Sun, Nov 16, 2025, 8:43 PM UTC

I got different IDs in regular browsing vs incognito mode in Firefox.

Re: Supercookie: Browser Fingerprinting via Favicon (2021)

#9

Post by vanschelven » Sun, Nov 16, 2025, 8:50 PM UTC

It's a shame that the actual attack mechanism doesn't seem to be detailed on the github repo, and the link to the article is dead.

Re: Supercookie: Browser Fingerprinting via Favicon (2021)

#10

Post by sjdonado » Sun, Nov 16, 2025, 8:58 PM UTC

The demo didn't work for me. Safari latest ios