Live data from Hacker News

Show HN: Explore what the browser exposes about you

neberej.github.io

51–60 of 95 posts

Re: Show HN: Explore what the browser exposes about you

#51

It reports that my OS is Windows 10 on two different browsers, even though my OS is Windows 7.

Do you know what user agent the browsers send?

I tried with Windows 7 (Firefox 115) and it reports Windows 7.

It seems though that it cannot distinguish between Windows 10 and Windows 11, so, without looking further, I suppose the detection is based on the User-Agent string? (The OS version browsers report on Windows is frozen, so Windows 10 and Windows 11 have the same version there.)

Re: Show HN: Explore what the browser exposes about you

#52
post #7

I tried various browsers, even the Tor browser, but it keeps showing 'Unique to 1 in 17.179.869.184+ devices'?

It's highly unlikely they obtained 17 billion samples, so they're likely guesstimating it by assuming each attribute is independent, and summing the entropy of all attributes. That's obviously incorrect, both because attributes are inevitably going to be correlated (eg. ip geolocation correlated with time zone), and that two identical devices (eg. 2 iPhones) will have identical fingerprints.

Re: Show HN: Explore what the browser exposes about you

#53
post #37

Is it possible and cost-covering to create an ad-sponsored service that discloses what ad networks collect about users - i.e. age, location, preferences, interests, pregnancy, illnesses etc? Because let’s be honest - all of us know that a lot of data points are being collected about us, countless articles have been written about the insanity of cookie and user-data monetization networks - still it appears to be a pri…

You mean something like https://consumer.risk.lexisnexis.com/request?

Or more like "on ad network X you match for keywords A, B, F, G"?

Re: Show HN: Explore what the browser exposes about you

#54
Here's another one: https://scrapfly.io/web-scraping-tools/browser-fingerprint They actually delve much deeper, with a wealth of additional data and interesting details.

For example, in the DRM section, they extract the Security Level, like L3 – Software Decode (SW_SECURE_DECODE).

Their WebRTC test is also unique: they utilize a TURN server as a feedback mechanism. That means even if you tamper with WebRTC JS in the browser (like some extensions do), it can still expose your real IP by leveraging UDP and bypassing the proxy altogether. https://scrapfly.io/web-scraping-tools/webrtc-leak

Re: Show HN: Explore what the browser exposes about you

#55

Hi HN, I’ve been experimenting with ways to reduce my browser fingerprint and exploring techniques to anonymize fingerprint data. So I built this. This is kind of like a lighter, more thorough version of CreepJS but entirely client side. I don’t maintain massive lists of time zones or do server-side comparisons to calculate uniqueness. Instead, it automatically surfaces everything a browser exposes, explaining each i…

There's a mis-understanding of at least the Graphics part. For example WebGPU features. It looks like lots of info

https://webgpureport.org/

But, they are bucketed

https://www.w3.org/TR/webgpu/#privacy-considerations

It's not zero pieces of info but it's also not close to as bad as it looks. Effectively, everyone who has, say an NVidia GPU, will likely have the same list of features and limits.

As a more general example: The number is just a flat out wrong

> Unique to 1 in 2,147,483,648+ devices.

No, I have an iPhone Pro and am in the PST time zone, set to English. It has the exact same finger print as millions of other devices among the 40 million people in the PST time zone. In general, The only things different between 2 iPhones of the same model are time-zone, laguange setting, and font size.

Please STOP EXAGGERATING!

Re: Show HN: Explore what the browser exposes about you

#56
post #15

Earlier quoted context omitted.

I would love to be able to toggle an attribute off/on to see what affect each has on the uniqueness of my fingerprint. My guess is that there are a handful of _very_ unique things, that if obscured, would make one less recognisable.

https://coveryourtracks.eff.org/ is less detailed but shows the individual uniqueness of each attribute.

that site has the same issue. It will give ridiculous and easily provably false results for iPhones.

There are ~40 million in the PST time-zone. Some percent have smartphones (80%+), ~50% of those are iPhones (16 million). Of those, the majority are set it English (80%+), and are divided into screen sizes. But basically, if you have an iPhone, you have the same fingerprint has at least a million other other people in the PST time size. You are at best, 1 of 100, not 1 of x,xxx,xxx,xxx.

You might be x,xxx,xxx,xxx of people who visited that unpopular site but no one needs tracking on an unpopular site. On a popular site you will not have a unique finger print.

Re: Show HN: Explore what the browser exposes about you

#57

Yet on the flip side, if I’m trying to auto identify my own phone for a login-less private app i tried to build I couldn’t get to reliably generate a consistent fingerprint on safari private mode, it regenerates 50% of the time, I’ve tried several libraries like fingerprintjs and co..

Fwiw, I use Tailscale/wireguard and take care to ensure the source IP gets fed to apps properly. This makes it easy to guarantee I have a reliable way to identify myself on my webapps and auto-auth.

Re: Show HN: Explore what the browser exposes about you

#58
post #48

If two people have the same model iPhone and same version of iOS how different or similar would the fingerprints be? My iPhone is allegedly unique to 1 in 2,147,483,648+ devices. But I wonder how true that is, given how many people use the same model and iOS version as me.

The fingerprint is comprised of more than device and OS: Browser type and version Screen resolution Installed fonts Browser plugins and extensions Canvas fingerprinting data WebGL (graphics hardware info) Time zone Language settings IP address HTTP headers Touch support Device type AudioContext

Yeah but several of those will also be the same if you have the same iPhone model and iOS. Safari browser updates are installed as part of iOS update. So anyone with the same iOS version has the same version of Safari.
Post reply on HN