3 ms·
Flash provides much more identifiable fingerprinting information (e.g. detailed information about your system fonts) and looser "Flash cookie" (Local Shared Obj
by cpeterso 11y ago
Flash provides much more identifiable fingerprinting information (e.g. detailed information about your system fonts) and looser "Flash cookie" (Local Shared Objects) restrictions than JavaScript.
https://panopticlick.eff.org/index.php?action=log&js=yes https://panopticlick.eff.org/index.php?action=log&js=yes
- exodust 11y agoDid you read their conclusions? Javascript is most certainly a method for fingerprinting, regardless of Flash presence. "Browser developers should also consider what they can do to reduce fngerprintability, particularly at the JavaScript API level." "We identified only three groups of browser with comparatively good resistance to fngerprinting: those that block JavaScript, those that use TorButton, and certain types of smartphone." Not having Flash doesn't mean you're immune to fingerprinting. That said, it would be nice if Adobe prevented system font lists via Flash.
- cpeterso 11y agoThat is true. Not having Flash does not mean you're immune to fingerprinting, but having Flash does mean more (a lot more) unique fingerprinting data is available to trackers. I wonder if browsers' plugin sandboxes could block Flash from calling the OS API to enumerate system fonts.