3 ms·

The Firefox "Random Agent Spoofer"* helps with this site at least. The biggest leak that needs to be plugged is the browser plugin details. Any obscure plugin

by tux1968 10y ago

The Firefox "Random Agent Spoofer"* helps with this site at least. The biggest leak that needs to be plugged is the browser plugin details. Any obscure plugins at all are worth a lot towards unique identification. Why any script should be able to enumerate all plugins is beyond me. * https://addons.mozilla.org/en-us/firefox/addon/random-agent-spoofer/ https://addons.mozilla.org/en-us/firefox/addon/random-agent-...

DavideNL 10y ago
> The biggest leak that needs to be plugged is the browser plugin details. Check this: https://github.com/Mechazawa/Firefox-plugin-enum-disable https://github.com/Mechazawa/Firefox-plugin-enum-disable (works in Chromium via Tampermonkey and Firefox via Greasemonkey) EDIT: argh you wrote 'Plugins' not Addons...
rbcgerard 10y ago
Using panopticlick, system fonts seem to be worth a lot as well, which is strange to me as i feel like very few people ever touch their system fonts? or do they change with different OS updates/patches?
- detaro 10y ago
  Often applications come with their own fonts as well.
  - rbcgerard 10y ago
    ahh, ok, thanks
eatbitseveryday 10y ago
To anonymize ourselves, we must know what common values are used for specific points of measurement by servers. Unless we set up our own website (such as this) how else will we know we are increasing our anonymity? Turning everything off, or disabling plugins is a unique data point in itself; I am not sure we'd want to avoid leaking our plugin configuration as if that is the default, we are then a very unique data point. Instead, we would have to know what values are common, then report those to servers. Edit: Also, the cited Firefox plugin doesn't seem to spoof the client's display resolution correctly[1]. With such plugins, I can imagine our profiles become increasingly unique, as it may present potentially numerous combinations of metrics to servers that are not typical in the wild. [1] https://duckduckgo.com/?q=what+is+my+screen+resolution https://duckduckgo.com/?q=what+is+my+screen+resolution
- tux1968 10y ago
  If they can't get plugin information from any client.....
  - eatbitseveryday 10y ago
    ... then that is a means of hiding yourself among the masses. But if it's not enabled by default (when anyone downloads the browser to install) to hide your plugins, you will "stick out like a sore thumb" with your list inaccessible to servers.

by tux1968 10y ago

DavideNL 10y ago

> The biggest leak that needs to be plugged is the browser plugin details. Check this: https://github.com/Mechazawa/Firefox-plugin-enum-disable https://github.com/Mechazawa/Firefox-plugin-enum-disable (works in Chromium via Tampermonkey and Firefox via Greasemonkey) EDIT: argh you wrote 'Plugins' not Addons...

rbcgerard 10y ago

Using panopticlick, system fonts seem to be worth a lot as well, which is strange to me as i feel like very few people ever touch their system fonts? or do they change with different OS updates/patches?

detaro 10y ago
Often applications come with their own fonts as well.
- rbcgerard 10y ago
  ahh, ok, thanks

eatbitseveryday 10y ago

To anonymize ourselves, we must know what common values are used for specific points of measurement by servers. Unless we set up our own website (such as this) how else will we know we are increasing our anonymity? Turning everything off, or disabling plugins is a unique data point in itself; I am not sure we'd want to avoid leaking our plugin configuration as if that is the default, we are then a very unique data point. Instead, we would have to know what values are common, then report those to servers. Edit: Also, the cited Firefox plugin doesn't seem to spoof the client's display resolution correctly[1]. With such plugins, I can imagine our profiles become increasingly unique, as it may present potentially numerous combinations of metrics to servers that are not typical in the wild. [1] https://duckduckgo.com/?q=what+is+my+screen+resolution https://duckduckgo.com/?q=what+is+my+screen+resolution

tux1968 10y ago
If they can't get plugin information from any client.....
- eatbitseveryday 10y ago
  ... then that is a means of hiding yourself among the masses. But if it's not enabled by default (when anyone downloads the browser to install) to hide your plugins, you will "stick out like a sore thumb" with your list inaccessible to servers.