3 ms·
Simply resizing my browser window before pasting the second url seems to thwart this (But I don't have flash installed). Without flash, it falls firmly into the
by noonespecial 15y ago
Simply resizing my browser window before pasting the second url seems to thwart this (But I don't have flash installed). Without flash, it falls firmly into the "kinda-works sometimes if everything goes perfect" camp.
So its another demonstration of flash being ridiculously insecure. These guys did it better, even defeating tor to reveal the origin IP. http://dl.packetstormsecurity.net/0610-advisories/Practical_Onion_Hacking.pdf http://dl.packetstormsecurity.net/0610-advisories/Practical_...
- Keverw 15y agoResizing my browser didn't go it but moving it to another screen it changed from "1ccf9e9301db4fb87b1d178d77edad5bfa598057" to "ab0e6beb449408b28473dd66a6f4501528087c0e". I don't think this method is prefect at all or should be used for anything reliable(like logins).
- delinka 15y agoReliability is not necessary. "Good enough" to sell ads- that's all they need.
- pwenzel 15y agoInteresting, I had Chrome Flash Block enabled but it did not seem to thwart this.
- 1880 15y agoEnabling click-to-play in Chrome (and not one of those extensions that hide or remove from the DOM the element once it's loaded) just makes the fingerprint to have less bits, since it can't get the list of the installed fonts on your computer.
- sdoering 15y agoI have a scriptblocker, an adblocker and ghostery installed. did not thwart this.
- toomanysecrets 15y agoIf someone's foolish enough to run javascript and flash on Tor, of course it's trivially easy to defeat it!
- Ralith 15y agoI expect most users of Tor fall into that category.
- justincormack 15y agoWorks on the ipad though. No flash, and cant resize window. Must be working off timezone? Surely some more ipads in the UK?
- ernesth 15y agoiPads may be rotated. Rotating my smartphone made it unrecognized.