Live data from Hacker News

Panopticlick – How Unique, and Trackable, Is Your Browser?

panopticlick.eff.org

41–50 of 61 posts

Re: Panopticlick – How Unique, and Trackable, Is Your Browser?

#42
Interestingly, I just tired this using Vidalia (the Tor browser).

> Your browser fingerprint appears to be unique among the 3,726,837 tested so far.

I may be using an outdated version of Tor. Did they reset their data at some point? I can't believe I'm the first person to have tried the test using the Tor browser in my time zone.

Re: Panopticlick – How Unique, and Trackable, Is Your Browser?

#44
post #2

Forgive me if I'm wrong, but it looks like if you could install a system font on a computer then you could create a unique fingerprint for that computer that is detectable by any website? I am uniquely identifiable out of the 3.7 million samples because of my system fonts.

Also the funny thing is you cannot be tracked by this, because whenever you install a new font, update a plugin, install a plugin etc, you change your unique data.

However, an unusual rare font could easily make someone detectable. It could even be a common font, but a rare variant of it namewise.

Re: Panopticlick – How Unique, and Trackable, Is Your Browser?

#45

Interestingly, I just tired this using Vidalia (the Tor browser). > Your browser fingerprint appears to be unique among the 3,726,837 tested so far. I may be using an outdated version of Tor. Did they reset their data at some point? I can't believe I'm the first person to have tried the test using the Tor browser in my time zone.

Is your NoScript activated on the eff domain? If it isn't, that statistic is highly possible.

Re: Panopticlick – How Unique, and Trackable, Is Your Browser?

#46
What are the browser makers doing to reduce the number of identifiable bits of data leaked?

Most of the bits of identifiable information listed there has a reason to leak since 99.999% of front-end developers have no reason to need that information to create an acceptable cross-browser experience for all users.

Re: Panopticlick – How Unique, and Trackable, Is Your Browser?

#47
post #2

Forgive me if I'm wrong, but it looks like if you could install a system font on a computer then you could create a unique fingerprint for that computer that is detectable by any website? I am uniquely identifiable out of the 3.7 million samples because of my system fonts.

Also the funny thing is you cannot be tracked by this, because whenever you install a new font, update a plugin, install a plugin etc, you change your unique data.

If the only factor they're ever tracking you with is your fonts, then yes, you're correct.

But what if you have the same IP address, user-agent, and plugins for a week, and midway through the week your font fingerprint changed? Then they just go and tie both fingerprints, or repalce the old one with the new one.

In reality this is not going to be a problem for any web service that seriously attempts to track users, and there are multiple such companies that are doing so and don't let this stop them. Usually only one fingerprint will change at a time, which makes it easy for them to account for it.

The only good solution is to prevent them from capturing that information in the first place, and the only way to prevent it is to block Javascript and Flash, which is most easily done with NoScript.

Re: Panopticlick – How Unique, and Trackable, Is Your Browser?

#48

Does anyone know any good Firefox/Chrome plugins that help make your browser less unique?

You could (from the most painless to the more painful, in my opinion):

- Use an addon and change your useragent to something common (I use Firefox Nightly, so changing it to a Firefox stable release would make my browser less unique. Blender is a firefox addon that does that)

- Remove as many plugins you can (click2play won't help here, a site can still see the plugin you have installed).

- Enable click2play for the plugin that you still have installed (avoid allowing the site to fetch information with those plugins)

- Disable cookies (If you want to keep a whitelist, I suggest Cookie Controller for Firefox)

- Disable javascript (NoScript for Firefox)

Note that those could actually make your browse more unique, since most people allow cookies and javascript.

As a quick example of that, my browser has ~20 bits of information (one in 1.242.524) with Flash enabled, but ~22 bits with flash disabled (unique).

Re: Panopticlick – How Unique, and Trackable, Is Your Browser?

#49

Interestingly, I just tired this using Vidalia (the Tor browser). > Your browser fingerprint appears to be unique among the 3,726,837 tested so far. I may be using an outdated version of Tor. Did they reset their data at some point? I can't believe I'm the first person to have tried the test using the Tor browser in my time zone.

Is your NoScript activated on the eff domain? If it isn't, that statistic is highly possible.

It's the Tor browser, so I haven't installed any extensions on it (the whole point of the Tor browser, as I understand it, is to present the same fingerprint to all browsers).

Re: Panopticlick – How Unique, and Trackable, Is Your Browser?

#50

Interestingly, I just tired this using Vidalia (the Tor browser). > Your browser fingerprint appears to be unique among the 3,726,837 tested so far. I may be using an outdated version of Tor. Did they reset their data at some point? I can't believe I'm the first person to have tried the test using the Tor browser in my time zone.

Their data-set it is quite old at this time, so it's simply too new to give you an accurate fingerprint stat.
Post reply on HN