3 ms·

Yes and yes. Take a look at the work of Steven Englehardt around cookie syncing and gpu fingerprinting [0] [1] [0]: https://freedom-to-tinker.com/2014/08/07/t

• ikeboy 10y ago
  Checking what sites use specific techniques is not the same as reversing JS to find new techniques.
  • mpeg 10y ago
    There's no new techniques, this stuff all uses the same javascript APIs and that's what the crawlers that look for this stuff look for. People have been doing GPU fingerprinting since the canvas APIs were available, with accuracy rates of over 90%, this further refines it by exploiting subtle differences in 3D rendering via webgl but the API surface is pretty small And you really don't need to reverse JS, you can just run it in a controlled environment and hook into certain calls etc. not too different to how you'd do analysis of vm / packed binaries though some of the scripts that do this stuff will try to detect these sandboxed environments and deactivate themselves (google does that, for example, cause they run their fingerprinting inside a custom VM in javascript)