3 ms·

Since the application attestation service sends application hashes unencrypted, any third party observing the traffic can fingerprint you if you use exotic enou

Since the application attestation service sends application hashes unencrypted, any third party observing the traffic can fingerprint you if you use exotic enough applications.

mulmen 6y ago
Do they even have to be exotic applications? I don't use Chrome very often but I think it is installed. That means I have a very current FF but some specific old version of Chrome. Ditto for a bunch of stuff installed by Macports, that all just updates at once but pretty infrequently. I don't recall the last time I updated Steam. Seems easy to fingerprint someone with just a handful of even normal apps.
- eptcyka 6y ago
  Given that a large majority of users only ever run a single browser and maybe a messaging app, anything above would be considered exotic in my book :)
  - mulmen 6y ago
    Good point. Do users uninstall stuff they use infrequently though?