3 ms·

>er... maybe if they're using metamask or something with the viewport pixel WxH set arbitrarily I was talking about canvas specifically, since the OP mentioned

by gruez 2y ago

>er... maybe if they're using metamask or something with the viewport pixel WxH set arbitrarily I was talking about canvas specifically, since the OP mentioned "js with canvas enabled". The rest can be somewhat mitigated by avoiding configurations that stick out, eg. using a "common" window size (ie. maximized). On firefox you can also use RFP with letterboxing, which rounds windows dimensions to the nearest 100 pixels, and defaults to 1000x1000. However, that's also somewhat suspicious (who perfectly sets their window to multiples of 100?) that you're better off using maximized window + common display resolution + standard taskbar/dock size. RFP also has mitigations for some of the other issues you mentioned, eg. a font whitelist.

genewitch 2y ago
I just opened edge on my 1080p monitor and made it fullscreen, and it's "you are unique among 3.4mm fingerprints". I'm just saying it's not as easy as all of that, even on a "computer" using the stock browser. you'd also have to figure out where most users are in the timezone data as that narrowed my browser down to 95% unique all on its own. (UTC-5)
- gruez 2y ago
  See my other comment on fingerprinting sites: https://news.ycombinator.com/item?id=43175193 https://news.ycombinator.com/item?id=43175193 >you'd also have to figure out where most users are in the timezone data as that narrowed my browser down to 95% unique all on its own. The best timezone to use is the one that corresponds to your IP info, because it doesn't reveal anything about you. You'd expect 95+% of users with a Californian geo ip to be on pacific time, for instance. Using anything else makes you stick out like a sore thumb. Statistics like "95% unique" also make little sense. Being able to identify you as one out of 400 million people (5% * world population) seems... fine? You can get better targeting through geoip/latency measurements, for instance. If you use a VPN in California, that narrows you down to 1 in 39 million people.
  - genewitch 2y ago
    I'm on starlink, so i don't get to pick my exit geographical region, and i actually live in UTC-5, UTC-5 is evidently only represented by 4.6% of all fingerprints. i understand what you're saying, of course.

by gruez 2y ago

genewitch 2y ago

I just opened edge on my 1080p monitor and made it fullscreen, and it's "you are unique among 3.4mm fingerprints". I'm just saying it's not as easy as all of that, even on a "computer" using the stock browser. you'd also have to figure out where most users are in the timezone data as that narrowed my browser down to 95% unique all on its own. (UTC-5)

gruez 2y ago
See my other comment on fingerprinting sites: https://news.ycombinator.com/item?id=43175193 https://news.ycombinator.com/item?id=43175193 >you'd also have to figure out where most users are in the timezone data as that narrowed my browser down to 95% unique all on its own. The best timezone to use is the one that corresponds to your IP info, because it doesn't reveal anything about you. You'd expect 95+% of users with a Californian geo ip to be on pacific time, for instance. Using anything else makes you stick out like a sore thumb. Statistics like "95% unique" also make little sense. Being able to identify you as one out of 400 million people (5% * world population) seems... fine? You can get better targeting through geoip/latency measurements, for instance. If you use a VPN in California, that narrows you down to 1 in 39 million people.
- genewitch 2y ago
  I'm on starlink, so i don't get to pick my exit geographical region, and i actually live in UTC-5, UTC-5 is evidently only represented by 4.6% of all fingerprints. i understand what you're saying, of course.