4 ms·
Agreed. Setting up blacklists is just whack-a-mole. I'd be more interested in detection of actual fingerprinting techniques, such as system font enumeration usi
by rubbingalcohol 8y ago
Agreed. Setting up blacklists is just whack-a-mole. I'd be more interested in detection of actual fingerprinting techniques, such as system font enumeration using canvas, or WebGL GPU fingerprinting. It would be technically possible to detect the creation of WebGL or canvas contexts that aren't actually rendered in the layout and prevent data gathered from those contexts from being sent in any XHR payload. I'm sure that's a lot of work.
Maybe it would be better to find the worst offending JS APIs and demand a user consent step similar to webcam or notifications in order for the scripts to run at all.
- drewmol 8y agoI couldn't help but read the headline and think to myself: This is great! I should probably jump right in to this .001 % bucket of Firefox nightly users. Combined this with my >1% OS, custom profile of barebones unsupported, blocked, not installed client technologies and then they'll really never get my fingerprints!
- discreditable 8y agoIf you enable resistFingerprinting, Firefox reports a "standard" user agent. Without that, your Nightly user agent probably makes you trivial to track.
- benmmurphy 8y agoSome sites are using these APIs as a way of providing positive data that the users environment is not a bot. I think if you ban this kind of thing you are going to break some important web apps.