4 ms·

That will just make you stand out more.

by FridayoLeary 11mo ago

1718627440 11mo ago
You can change the reported UA header independently of the UA you use.
- michaelt 11mo ago
  If I was a fingerprinting company, I'd be cross-referencing signals between browsers for sure. If the browser header says windows but the fonts available says linux, that's a very distinctive signal. And if the UA says Chrome but some other signal says not-chrome, that's very distinctive as well.
  - nativeit 11mo ago
    You said it better than I did.
  - biztos 11mo ago
    Surely this is true, but if you’re a fingerprinting company aren’t you making so much money violating the privacy of the masses that it’s not worth your time going after the tiny set of Freedom Nerds trying to evade you?
    - weird-eye-issue 11mo ago
      They aren't specifically going after you... they just try to create a unique hash from everything they can and by doing weird things to your system you are making a truly unique hash easier
    - jijijijij 11mo ago
      Yeah, and my passwords are so obvious and stupid, nobody's gonna guess them! I think, you are falling for a technical fallacy. It's not costing them any more time.
- nativeit 11mo ago
  The article also mentions this, and suggests the UA is not a silver bullet. That said, they didn’t go into specifics. I’m assuming there are other details that correlate to particular browsers that will betray a false UA. Plus, having a UA that says Chrome while including an extension that’s exclusive to Safari (tor example) will not only contradict the UA, but it will also be a highly distinctive datapoint for fingerprinting, in and of itself.
- deleted 11mo ago
  [deleted]
- codedokode 11mo ago
  You can change the header, but browser developers are not that dumb and they added properties like "navigator.platform" which do not change and immediately give you away. Consider also writing a browser extension to patch these properties. Also, I think that DRM module (widewine), that is bundled with browsers, also can report the actual software version. Sadly it is undocumented so I don't know what information it can provide, but I notice warnings from Firefox about attempts to use DRM on various sites like Yandex Market.

That will just make you stand out more.

1718627440 11mo ago

You can change the reported UA header independently of the UA you use.

michaelt 11mo ago
If I was a fingerprinting company, I'd be cross-referencing signals between browsers for sure. If the browser header says windows but the fonts available says linux, that's a very distinctive signal. And if the UA says Chrome but some other signal says not-chrome, that's very distinctive as well.
- nativeit 11mo ago
  You said it better than I did.
- biztos 11mo ago
  Surely this is true, but if you’re a fingerprinting company aren’t you making so much money violating the privacy of the masses that it’s not worth your time going after the tiny set of Freedom Nerds trying to evade you?
  - weird-eye-issue 11mo ago
    They aren't specifically going after you... they just try to create a unique hash from everything they can and by doing weird things to your system you are making a truly unique hash easier
  - jijijijij 11mo ago
    Yeah, and my passwords are so obvious and stupid, nobody's gonna guess them! I think, you are falling for a technical fallacy. It's not costing them any more time.
nativeit 11mo ago
The article also mentions this, and suggests the UA is not a silver bullet. That said, they didn’t go into specifics. I’m assuming there are other details that correlate to particular browsers that will betray a false UA. Plus, having a UA that says Chrome while including an extension that’s exclusive to Safari (tor example) will not only contradict the UA, but it will also be a highly distinctive datapoint for fingerprinting, in and of itself.
deleted 11mo ago
[deleted]
codedokode 11mo ago
You can change the header, but browser developers are not that dumb and they added properties like "navigator.platform" which do not change and immediately give you away. Consider also writing a browser extension to patch these properties. Also, I think that DRM module (widewine), that is bundled with browsers, also can report the actual software version. Sadly it is undocumented so I don't know what information it can provide, but I notice warnings from Firefox about attempts to use DRM on various sites like Yandex Market.