3 ms·

Essentially breaks many fingerprinting strategies. This is a very good change.

• loeg 6y ago
  Can you elaborate on what fingerprinting attack is broken by this model?
  • quotemstr 6y ago
    Because now, you can only probe for the existence of a specific shared library. You can't just enumerate all the libraries that happen to be available. That said, this change appears to apply only to system libraries --- how much fingerprinting entropy is contained in the system library list that isn't already contained in the OS version information?
    • plorkyeran 6y ago
      Zero, because the set of system libraries is fixed and doesn't vary between machines.
      • rurban 6y ago
        Fixed for this specific version. Probing tools are there to abstract different versions and changing API's. Now you got a probing tool with executive side effects, before it was pure read-only. Not everyone will be happy with this idea to execute first, look later. dynamic libs execute init functions at dlopen(). Check the various ld security implications.