Live data from Hacker News

The privacy nightmare of browser fingerprinting

kevinboone.me

251–260 of 456 posts

Re: The privacy nightmare of browser fingerprinting

#251

Earlier quoted context omitted.

That will just make you stand out more.

You can change the reported UA header independently of the UA you use.

If I was a fingerprinting company, I'd be cross-referencing signals between browsers for sure.

If the browser header says windows but the fonts available says linux, that's a very distinctive signal.

And if the UA says Chrome but some other signal says not-chrome, that's very distinctive as well.

Re: The privacy nightmare of browser fingerprinting

#252
post #248

On articles like this always I see a lot of people bragging about how they’ve pimped out their browser(s) to make themselves “untrackable” (or proposals to make new ways of tracking impossible) but nobody ever brags about how lack of “tracking” has positively impacted their lives. I do block ads on the web with UBlock Origin because there’s no pay option to opt-out of it and ads ruin the experience. But I don’t give…

People being untrackable in general ensures that folks who need to be untrackable are more easily able to achieve that goal --- the world is a much darker place if journalists are hindered in researching stories.

Re: The privacy nightmare of browser fingerprinting

#253
post #250
post #248

On articles like this always I see a lot of people bragging about how they’ve pimped out their browser(s) to make themselves “untrackable” (or proposals to make new ways of tracking impossible) but nobody ever brags about how lack of “tracking” has positively impacted their lives. I do block ads on the web with UBlock Origin because there’s no pay option to opt-out of it and ads ruin the experience. But I don’t give…

Whether or not they would enjoy a better life doesn’t matter if there’s no way to avoid your assumed preferences being tied to your devices, and for it to know the preferences of those you spend time with, those you work with, where you go, etc. Though, from what I understand, overall the fingerprinting success rate is only about 30%.

One time fingerprinting, sure. But if you collate tracking info from a hundred sources or so, you pretty much have person, name, email, and location.

Re: The privacy nightmare of browser fingerprinting

#254
post #248

On articles like this always I see a lot of people bragging about how they’ve pimped out their browser(s) to make themselves “untrackable” (or proposals to make new ways of tracking impossible) but nobody ever brags about how lack of “tracking” has positively impacted their lives. I do block ads on the web with UBlock Origin because there’s no pay option to opt-out of it and ads ruin the experience. But I don’t give…

> nobody ever brags about how lack of “tracking” has positively impacted their lives

This reminds me of the anti-vax logic a tad in that they lack the imagination on the seemingly obvious effects of their ideal world.

Being indifferent to companies and political parties (which becomes your Gov't when voted into power) indirectly states that you are indifferent to others attempts to influence you and/or foolhardy enough to believe that all of your beliefs consistently originates from objective personal experience.

Re: The privacy nightmare of browser fingerprinting

#255

Earlier quoted context omitted.

That will just make you stand out more.

You can change the reported UA header independently of the UA you use.

The article also mentions this, and suggests the UA is not a silver bullet. That said, they didn’t go into specifics. I’m assuming there are other details that correlate to particular browsers that will betray a false UA. Plus, having a UA that says Chrome while including an extension that’s exclusive to Safari (tor example) will not only contradict the UA, but it will also be a highly distinctive datapoint for fingerprinting, in and of itself.

Re: The privacy nightmare of browser fingerprinting

#256

Earlier quoted context omitted.

You can change the reported UA header independently of the UA you use.

If I was a fingerprinting company, I'd be cross-referencing signals between browsers for sure. If the browser header says windows but the fonts available says linux, that's a very distinctive signal. And if the UA says Chrome but some other signal says not-chrome, that's very distinctive as well.

You said it better than I did.

Re: The privacy nightmare of browser fingerprinting

#257

Earlier quoted context omitted.

There's no point unless a critical mass of people use these tools. You will be the only one on your IP address using this configuration of masked fingerprinting, which is itself a fingerprint. That's also why it's indeed useful when using Tor, because you're not identified by your base IP. Unless we make this part of the culture, you have basically 0 recourse to browser fingerprinting except using Tor. Which can itse…

Basically the XKCD license plate comic: https://xkcd.com/1105/

Has anyone wrote software that automatically surfaces the relevant XKCD comic for every article this happens under?

I’d like a feature in my HN reader that sticks a red button at the bottom anytime XKCD has already made the points I’m reading.

Re: The privacy nightmare of browser fingerprinting

#258
post #248

On articles like this always I see a lot of people bragging about how they’ve pimped out their browser(s) to make themselves “untrackable” (or proposals to make new ways of tracking impossible) but nobody ever brags about how lack of “tracking” has positively impacted their lives. I do block ads on the web with UBlock Origin because there’s no pay option to opt-out of it and ads ruin the experience. But I don’t give…

The average person probably won't notice or care otherwise this would be a much more publicized issue. The average person also doesn't care that their refrigerator and television phone home, their calls and data are slurped up by the NSA, and their location can be tracked through their cell phone and vehicle movements.

However, just because the average person doesn't notice and doesn't care, it doesn't mean that their life can't be ruined at some point because of these things. You never know when you're suddenly going to be targeted for something you may or may not have done.

Re: The privacy nightmare of browser fingerprinting

#259

Earlier quoted context omitted.

You're presupposing that these blogs are producing content worth paying for. The unfortunate truth is that the overwhelming majority of blogs (99.9%+) are not.

Then why is everyone so nostalgic for the old days of the blogosphere to return? If blogs are all worthless, then we shouldn't care that they're disappearing and/or being put behind paywalls; we haven't lost anything.

I blog for my own satisfaction, and my blog has no ads on it, and I don't charge visitors. I'm happy to have a few dozen readers.

That's what people are bemoaning the loss of: the before times, when people did interesting stuff without regard for whether it could be monetized or not.

Re: The privacy nightmare of browser fingerprinting

#260
post #248

On articles like this always I see a lot of people bragging about how they’ve pimped out their browser(s) to make themselves “untrackable” (or proposals to make new ways of tracking impossible) but nobody ever brags about how lack of “tracking” has positively impacted their lives. I do block ads on the web with UBlock Origin because there’s no pay option to opt-out of it and ads ruin the experience. But I don’t give…

I think about this sometimes as I do a lot of things attempt to protect my privacy and keep control of what I’m paying attention to (ie not doom scrolling / shorts, carefully controlling notifications). So I make a lot of sacrifices including my time in order to maintain control over my technology.

I think it’s not possible for me to say if my life is really better, because it’s the whole road not taken thing. It’s not possible to know and so it’s not worth agonising over, but I’m choosing to live according to my values at least, and that seems valuable.

Post reply on HN