3 ms·
As long as JavaScript is enabled in the browser, there will always be some clever way to use it for fingerprinting, even if you effectively have to use side cha
by meowface 7y ago
As long as JavaScript is enabled in the browser, there will always be some clever way to use it for fingerprinting, even if you effectively have to use side channels to get information like installed fonts. There's no avoiding it.
- na85 7y agoI disagree with the assumption that there will always be a way to fingerprint with it, and I reject the notion that we should just give up the arms race. If what you assert is true then JavaScript needs to die. Now.
- meowface 7y agoYou could try to prove me wrong, but from everything I've seen, I think the consensus is that it will always be possible unless there's a complete overhaul of how browser scripting works. JavaScript has almost complete control of your browser, and if you try to sandbox it or mitigate certain fingerprinting techniques (by disabling/nullifying/randomizing things), people will almost always find some workaround. And the more restrictive you get, the more websites you'll break, since many legitimate code relies on those features (like screen resolution, device type, browser language, browser timezone, what formats and features the browser supports).