4 ms·
The goal of fingerprinting in this case is not to uniquely identify users, but merely to differentiate real human users using an actual iPhone from bots that us
by pifm_guy 4y ago
The goal of fingerprinting in this case is not to uniquely identify users, but merely to differentiate real human users using an actual iPhone from bots that use an emulated iPhone.
This fingerprint suffices for that. They use small differences like the size of audio buffers, the exact capabilities of the GPU, etc.
Emulate any one of those slightly wrong and the fingerprint will differ and your bot will be revealed.
- nicolaslem 4y ago> They use small differences like the size of audio buffers. Fun fact, on my laptop I can hear websites who use audio APIs for fingerprinting because it causes the audio subsystem to wake up and the speakers make a small pop sound.
- notpachet 4y agoUgh, me too. This is always my cue to close that tab.
- SpaghettiCthulu 4y agoThat works until the bot just overrides the fingerprint
- pifm_guy 4y agoThat's why the fingerprint is taken by obfusticated code running in a VM. And that VM also uses a crypto challenge so you can't just replace the output of the VM