3 ms·
I would honestly like to know how they suppose to learn whether a server does device fingerprinting. Isn't the technique purely server-side?
by DocTomoe 2y ago
I would honestly like to know how they suppose to learn whether a server does device fingerprinting. Isn't the technique purely server-side?
- nprateem 2y agoServer-side fingerprinting is useless.
- Etheryte 2y agoOutside of the IP, the server can only know data that the client collects and sends (and even the IP isn't much, because most ISPs give dynamic IPs these days, plus VPNs etc).
- DrScientist 2y agoMostly true - but there is other information in the ethernet packets themselves - for example see https://www.informatik.tu-cottbus.de/~andriy/papers/clock-skew-ntp-ieee-globecom2012.pdf https://www.informatik.tu-cottbus.de/~andriy/papers/clock-sk... and there is information added during the routing - not just information from client - from the intermediates. And you also have to consider the power of patterns - where one piece isn't enough to see the picture, but if you have enough pieces you can ( jigsaw identification ).
- threeseed 2y agoFingerprinting is done client-side using browser APIs e.g. WebMidi. The fingerprint is then associated with a user's email address or login identifier and then sent either client-side or these days server-side to Google Ads.