4 ms·

I agree, panopticlick is not really good as a measuring point. I am randomizing most of metrics it is using and even if it detects my browser as unique, this wi

by stiray 7y ago

I agree, panopticlick is not really good as a measuring point. I am randomizing most of metrics it is using and even if it detects my browser as unique, this will always be true as my data are fake and randomized each time browser tab is opened. Sure you can track me for the time tab is beeing alive, but on next visit, the results are going to be 90% different (including webgl fingerprinting) and there is no way it could correlate me with my previous visit. For it I am always a new visitor, never seen before. I could try to blend in, but why? Another thing is "not blocking sites that honor DNT". I am sorry but I dont trust anyone based on fact web users were lied just too many times. Once DNT will be tied to hefty fines, I might reconsider, untill than everything will be blocked. (And it is highly tasteless that eff is offering links to promote panopticlick on worse web tracking facilities of the internet - fb, google+ and twitter.)

dmm 7y ago
If you don't mind, how are you randomizing these metrics?
- zahma 7y ago
  Not sure what the other poster is using, but you could try https://add0n.com/useragent-switcher.html?version=0.3.2&type=install https://add0n.com/useragent-switcher.html?version=0.3.2&type... or https://addons.mozilla.org/en-US/firefox/addon/random_user_agent/ https://addons.mozilla.org/en-US/firefox/addon/random_user_a...
  - OrgNet 7y ago
    the useragent is far from being the only metric used by panopticlick
    - zahma 7y ago
      I know that, but the UA does provide the highest number of bits of identifying information.
      - OrgNet 7y ago
        is that still true since operating systems and browsers automatically update themselves now?
        zahma 7y ago
        Fair point, that probably lowers the odds of recognition a bit, but the UA stands out because of the multiple variables that it reports in one header. At least when I ran Panopticlick a few times with various configurations, that was always the factor which gave up the most bits of identifying info.
  - danShumway 7y ago
    If you're primarily worried about privacy, I recommend against spoofing your user agent unless you're only changing superficial details. See https://bugzilla.mozilla.org/show_bug.cgi?id=1404608 https://bugzilla.mozilla.org/show_bug.cgi?id=1404608 It's very hard to fake an OS or pretend to be a separate browser. If you're focusing on disinformation, you should probably be focusing on disinformation that's harder to detect.
kokx 7y ago
Please tell me that there is an extension with which you randomize this data? I want it as well!
- zahma 7y ago
  Not sure what the other poster is using, but you could try https://add0n.com/useragent-switcher.html?version=0.3.2&type.. https://add0n.com/useragent-switcher.html?version=0.3.2&type.... or https://addons.mozilla.org/en-US/firefox/addon/random_user_agent/ https://addons.mozilla.org/en-US/firefox/addon/random_user_a...
- deleted 7y ago
  [deleted]
- OrgNet 7y ago
  that'd be nice but I don't think that there is one so I don't think that he is doing what he is claiming.
temp128349 7y ago
For everyone wondering: Firefox extension Chameleon randomly spoofs your user agent. However, I would highly recommend NOT using this extension, or randomizing your user agent whatsoever - it only raises your entropy and makes you easier to track. You should be trying to make your browser look identical to everyone else's, not different. This can by partially achieved by setting privacy.resistFingerprinting to true in Firefox's about:config. This won't stop Panopticlick from fingerprinting you. If you really want to reduce your fingerprint, try using the ghacks user.js [1]. If you want to make fingerprinting completely impossible, use the TOR browser [2]. Most users don't need to worry about this - uBlock origin blacklists most fingerprinting efforts by default. Please read: https://www.privacytools.io/browsers/#fingerprint https://www.privacytools.io/browsers/#fingerprint [1] https://github.com/ghacksuserjs/ghacks-user.js https://github.com/ghacksuserjs/ghacks-user.js [2] https://www.torproject.org/ https://www.torproject.org/ More Firefox privacy extensions: https://github.com/ghacksuserjs/ghacks-user.js/wiki/4.1-Extensions https://github.com/ghacksuserjs/ghacks-user.js/wiki/4.1-Exte...
- zahma 7y ago
  You're assuming that trackers account for a changing UA. Are there trackers doing that? I suppose a deliberate or malicious attempt to identify me and isolate my machine could account for a randomly spoofed UA. But if I am trying to hide in plain sight from tracking software, isn't this method of UA spoofing enough to misplace my machine into different tracking categories or throw them off my scent entirely? When I run Panopticlick, UA is usually among the highest number of bits of identifying information, the rest of the identifying settings and preferences are more likely to be shared, which makes a particular device blend in.

by stiray 7y ago

dmm 7y ago

If you don't mind, how are you randomizing these metrics?

zahma 7y ago
Not sure what the other poster is using, but you could try https://add0n.com/useragent-switcher.html?version=0.3.2&type=install https://add0n.com/useragent-switcher.html?version=0.3.2&type... or https://addons.mozilla.org/en-US/firefox/addon/random_user_agent/ https://addons.mozilla.org/en-US/firefox/addon/random_user_a...
- OrgNet 7y ago
  the useragent is far from being the only metric used by panopticlick
  - zahma 7y ago
    I know that, but the UA does provide the highest number of bits of identifying information.
    - OrgNet 7y ago
      is that still true since operating systems and browsers automatically update themselves now?
      - zahma 7y ago
        Fair point, that probably lowers the odds of recognition a bit, but the UA stands out because of the multiple variables that it reports in one header. At least when I ran Panopticlick a few times with various configurations, that was always the factor which gave up the most bits of identifying info.
- danShumway 7y ago
  If you're primarily worried about privacy, I recommend against spoofing your user agent unless you're only changing superficial details. See https://bugzilla.mozilla.org/show_bug.cgi?id=1404608 https://bugzilla.mozilla.org/show_bug.cgi?id=1404608 It's very hard to fake an OS or pretend to be a separate browser. If you're focusing on disinformation, you should probably be focusing on disinformation that's harder to detect.

kokx 7y ago

Please tell me that there is an extension with which you randomize this data? I want it as well!

zahma 7y ago
Not sure what the other poster is using, but you could try https://add0n.com/useragent-switcher.html?version=0.3.2&type.. https://add0n.com/useragent-switcher.html?version=0.3.2&type.... or https://addons.mozilla.org/en-US/firefox/addon/random_user_agent/ https://addons.mozilla.org/en-US/firefox/addon/random_user_a...
deleted 7y ago
[deleted]
OrgNet 7y ago
that'd be nice but I don't think that there is one so I don't think that he is doing what he is claiming.

temp128349 7y ago

For everyone wondering: Firefox extension Chameleon randomly spoofs your user agent. However, I would highly recommend NOT using this extension, or randomizing your user agent whatsoever - it only raises your entropy and makes you easier to track. You should be trying to make your browser look identical to everyone else's, not different. This can by partially achieved by setting privacy.resistFingerprinting to true in Firefox's about:config. This won't stop Panopticlick from fingerprinting you. If you really want to reduce your fingerprint, try using the ghacks user.js [1]. If you want to make fingerprinting completely impossible, use the TOR browser [2]. Most users don't need to worry about this - uBlock origin blacklists most fingerprinting efforts by default. Please read: https://www.privacytools.io/browsers/#fingerprint https://www.privacytools.io/browsers/#fingerprint [1] https://github.com/ghacksuserjs/ghacks-user.js https://github.com/ghacksuserjs/ghacks-user.js [2] https://www.torproject.org/ https://www.torproject.org/ More Firefox privacy extensions: https://github.com/ghacksuserjs/ghacks-user.js/wiki/4.1-Extensions https://github.com/ghacksuserjs/ghacks-user.js/wiki/4.1-Exte...

zahma 7y ago
You're assuming that trackers account for a changing UA. Are there trackers doing that? I suppose a deliberate or malicious attempt to identify me and isolate my machine could account for a randomly spoofed UA. But if I am trying to hide in plain sight from tracking software, isn't this method of UA spoofing enough to misplace my machine into different tracking categories or throw them off my scent entirely? When I run Panopticlick, UA is usually among the highest number of bits of identifying information, the rest of the identifying settings and preferences are more likely to be shared, which makes a particular device blend in.