throwaway202302

5 ms·

1.
by throwaway202302 3y ago
Dear HN, few years ago big news were around about TLS session (resumption) tracking. I find no current information whether this issue has been fixed or if current browsers mitigate it in private mode; as it seems to basically be a feature I
2.
Current state of TLS session resumption tracking(ssl.com)
2 points by throwaway202302 3y ago|1 comments
3.
Ask HN: Is fingerprint.com reading your forename?
7 points by throwaway202302 4y ago|2 comments
4.
by throwaway202302 4y ago
Is someone here working at apple? https://niespodd.github.io/webrtc-local-ip-leak/ still? leaks local IP in mobile safari. On browserleaks local ip check fails, giving false feeling of safety.
5.
by throwaway202302 4y ago
Oh, finally I found an element of distinguation for the Iphone: The zoom settings in the display/brightness section of the iphone seem quite relevant for fingerprint.com algorithm. Toggling between standard/bigger text toggles the
6.
by throwaway202302 4y ago
Scrolling a bit through the mess it seems, it is for exampling, trying to detect the used ad-blockers. .... adGuardGerman:[u("LmJhbm5lcml0ZW13ZXJidW5nX2hlYWRfMQ==") .... I see things hat look like font fingerprinting, CSS, Apple p
7.
by throwaway202302 4y ago
POST https://fpa.fingerprint.com/?ci=js/3.8.10&ii=fingerprintjs-p... It looks like it is using heavy obfuscation.
8.
by throwaway202302 4y ago
Then, could not we a get a trace of the properties it uploads to the server by analyzing what is executed in the javascript? Sure it has some sort of submit endpoint where it throws the individual values to.
9.
by throwaway202302 4y ago
That there are os-level identifiers is I think a different discussion. I wonder why these were cited in context of fingerprint.com discussion.
10.
by throwaway202302 4y ago
But how could it distinguish different profile directories, if they use the same settings. I would assume profile id, directories, or others should not be exposed through the browser. I am not used to chromium-browser (is this chrome? forgi
11.
by throwaway202302 4y ago
Did you check amiunique.org as well with these?
12.
by throwaway202302 4y ago
Websites can access machine-id?
13.
by throwaway202302 4y ago
I observed this too, but I cannot really believe it. For me it finds just german on the iphone. I get 0.88% for it. But if all Apples do it the same, I can hardly believe this provides already such selectivity. The problem with such test si
14.
by throwaway202302 4y ago
Do these profiles clear their cookies after request? I assume if the service finds a matching cookie, it will prefer it, or at least use as an extra identifier.
15.
by throwaway202302 4y ago
https://www.lightbluetouchpaper.org/2006/03/09/video-eavesdr... Rather old one, where 25m was claimed. (Markus Kuhn). Some like 200m were claimed by anons in random threads ( https://www.mikrocontro
16.
by throwaway202302 4y ago
What about the neighbor above/below your apartment? A ceiling of ferroconcrete is a good blocker (or a good multiplier?) From my apartment, I can see a telecommunication tower, about 1.2 kilometers away. Wondering what it could pick up
17.
by throwaway202302 4y ago
I’ve read some related things, which said its the hdmi cable that radiates, but I understand any component might be. Two questions: - How many meters do we need to expect our lcd/ips monitors to radiate? - Do we know about any monitor&
18.
Why is fingerprint.com browser fingerprint working so well with iPhones?(fingerprint.com)
30 points by throwaway202302 4y ago|14 comments
19.
by throwaway202302 4y ago
Dear HN, maybe you know. This is about precision of browser fingerprinting. fingerprint.com generates a hash from browser/os attributes to recognize users without cookies. I tried their demo using iphone and expected (because i use pri