4 ms·
There's no new techniques, this stuff all uses the same javascript APIs and that's what the crawlers that look for this stuff look for. People have been doing
by mpeg 10y ago
There's no new techniques, this stuff all uses the same javascript APIs and that's what the crawlers that look for this stuff look for.
People have been doing GPU fingerprinting since the canvas APIs were available, with accuracy rates of over 90%, this further refines it by exploiting subtle differences in 3D rendering via webgl but the API surface is pretty small
And you really don't need to reverse JS, you can just run it in a controlled environment and hook into certain calls etc. not too different to how you'd do analysis of vm / packed binaries though some of the scripts that do this stuff will try to detect these sandboxed environments and deactivate themselves (google does that, for example, cause they run their fingerprinting inside a custom VM in javascript)