4 ms·
Can a web server get a list of plugins installed by the client? That can't be right, can it?
by statictype 11y ago
Can a web server get a list of plugins installed by the client? That can't be right, can it?
- chipperyman573 11y agoYup, it's part of the EFF browser fingerprinting https://panopticlick.eff.org/ https://panopticlick.eff.org/
- voiper1 11y agoWhoa, thanks for that link! I went to clean up the most revealing one: "HTTP_ACCEPT Headers" ... I turned off least-used language in chrome://settings/languages It was 1/1200, now it's 1/9... still says I'm unique, though.
- gruez 11y agoYes, by javascript (https://developer.mozilla.org/en-US/docs/Web/API/NavigatorPlugins/plugins https://developer.mozilla.org/en-US/docs/Web/API/NavigatorPl...). They somewhat fixed it by preventing you from enumerating through all the plugins, and requiring you to know the exact name, but that doesn't stop you from trying a list of all the common plugins.