3 ms·
Your browser (including the exact version) can be determined without looking at the user agent string (which is mostly a series of lies anyway). Changing it "fo
by ryan-c 12y ago
Your browser (including the exact version) can be determined without looking at the user agent string (which is mostly a series of lies anyway). Changing it "for privacy" makes you easier to track.
As to the plugin list, you could make it non-enumerable, but then one could just probe for the X most common ones, like can be done for fonts.
- rvern 12y agoI doubt it is possible to determine the exact version, or even the browser (though the accept headers might leak it), without JavaScript. Thus NoScript fixes that problem. You are right that this gives more information to a determined person, but anyone who pushes fingerprinting to the point of detecting a user’s browser version and other characteristics through JavaScript will certainly be able to identify you uniquely anyway. In such a case, it doesn’t matter than this person has more or less information, since he can already identify you; and having a generic user agent makes people who only look at it know less about you.
- ryan-c 12y agoIt's possible to differentiate the major browsers and operating systems without javascript, and even the versions can be narrowed down without javascript even with user agent spoofing. p0f, for example, can do this. http://lcamtuf.coredump.cx/p0f3/ http://lcamtuf.coredump.cx/p0f3/