• snoons@lemmy.ca
    link
    fedilink
    English
    arrow-up
    40
    ·
    6 days ago

    >connects to site with NoScript  
    >nothing loads  
    >checkmate 😎

    • refalo@programming.dev
      link
      fedilink
      arrow-up
      5
      arrow-down
      1
      ·
      6 days ago

      This is actually much worse for privacy than leaving everything stock, because a site can tell you aren’t downloading or running any javascript, and that immediately puts you in an extremely tiny bucket of people it needs to differentiate from, making any differences visible via IP/TCP/TLS/HTML/CSS much more unique.

      And yes, fingerprinting is possible with just HTML and/or CSS… I would argue even moreso without JS.

      • hirihit640@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        edit-2
        3 days ago

        Fingerprinting can usually identify you uniquely. So even if only two people in the world were using NoScript, it would still be more private than getting fingerprinted.

        Edit: btw I’m talking about Javascript fingerprinting. Other methods like HTML and CSS are far less effective and rarely seen in the wild.

  • queeradjacent@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    12
    ·
    6 days ago

    Is there a fingerprint randomizing browser or plugin yet? Last time I lazily researched it there just wasn’t one good enough, I keep limping along with ublock and umatrix and all that.

    • snoons@lemmy.ca
      link
      fedilink
      English
      arrow-up
      12
      ·
      6 days ago

      AFAIK (which isn’t much), LibreWolf does this by standardizing all it’s ‘outputs’ so no one can tell either browser apart. As long as you don’t change anything that is.

      • queeradjacent@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        ·
        6 days ago

        Giving up umatrix would be hard, but maybe this’d replace DDG for my “I just need this site to work right now” browser 🤔

      • ulterno@programming.dev
        link
        fedilink
        English
        arrow-up
        3
        ·
        6 days ago

        Other than that the site can tell it is Librewolf.
        Although, I opened amiunique.org in 2 different ways and the audio data and canvas footprints were showing up to be unique in both. So unless they are randomising it on every start, it is not standard enough.

        While on firefox (on a close enough version), the Audio data was coming unsupported, which made it ~30% similarity ratio. On checking now though, the Audio data is visible with firefox.

        What made my browser unique was the Canvas and the List of fonts. The latter tends to change every now and then without me doing anything special, because I just downloaded too many fonts.

  • tyler@programming.dev
    link
    fedilink
    arrow-up
    5
    ·
    5 days ago

    Almost all of the data it showed me was inaccurate, whew. Firefox doing a good job there.

    That helps less than you’d think, fingerprinting doesn’t need to be accurate,

    incorrect, it needs to be very accurate if it’s actually going to track you. If you block tracking scripts and all a website can do is fingerprint you then they’re getting nothing besides “you read this article” or “you visited this page” with no way to sell that data. noticeably the ad sales section was almost completely empty for me. If a single bit of my information changes the previous fingerprint was completely useless.

    also this site is just making shit up 😂

    output when I typed a single letter at a type with half a second between each, and quit the sentence as soon as it said I could:

    Your typing rhythm is steady and practised, you spend a lot of time at a keyboard.how? You type at about 45 words a minute.how?

    output when I typed full speed

    Your typing rhythm is uneven, hunt-and-peck, or you were distracted.how? You type at about 105 words a minute.how?


    Timezone America/Denver 0.8% of people - 1 in 297,619

    is just laughably incorrect though. maybe it’s based on how many people have actually visited the site like that? but most people have multiple devices, if not a work computer and cell phone at minimum. that would mean only 150k people have America/Denver as their time zone, when the reality is probably 10-15 million, so this number is actually more like 1 in 20-30million


    firefox nicely randomizes output between runs, so it was 16core the first time, 8 core the second time.


    finally this “1 in x” is just laughably wrong. it always says 1 in 133.2 million, even if I give it more data like the size of my screen (which is 1 in tens of millions).

    not saying that fingerprinting doesn’t work, it obviously does, but this site is shit and doesn’t prove that point at all.

  • crenquis@lemmy.today
    link
    fedilink
    arrow-up
    7
    ·
    6 days ago

    The receipt

    Putting it together: roughly 1 in 132.1 million browsers look like yours. None of this used a cookie

    Second visit: We’ve met before

    I’ve seen you before, you first showed up earlier today. This is visit number 2. And you came straight here, no link, no search. You remembered the URL by heart. That is almost sweet.how?

    And you cleared some of it, 2 of my hiding places were empty when you arrived. I restored them from the ones you missed. This is what tracking looks like without cookies.how?

    • Blue_Morpho@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      6 days ago

      I’m dubious of the stats. Sure if you include China, India, and Africa, your 1in 100M.

      But let’s look at it the other way.

      East Coast population: 128M Android: 30% US = 38M

      Primary language English: 77% (realistically for people in US browsing it’s closer to 90%)

      = 29 M

      Screen Resolution was wrong.

      But realistically it’s identifying your phone model which tend to have unique resolutions. Phones outnumber desktops 8 to 1. So it identified my Pixel which is 4%.

      It claims “Do not track on” is rare at 1 in 186,000 but that’s the default for Chrome, Edge, Firefox and Safari.

      So that means I’m in a pool of 1.1M other users.

      Now there are other fingerprints that can narrow it down more, but imo standing in a crowd of over 1M identical people is sort of anonymous.

      Btw, I got the same 1in 132M number that you got.

    • xav@programming.dev
      link
      fedilink
      arrow-up
      3
      ·
      6 days ago

      I came back 1 min later and it didn’t recognize me. Still perfectible. Even though I’m 1 in 200 millions apparently.

  • Damage@feddit.it
    link
    fedilink
    Italiano
    arrow-up
    2
    ·
    5 days ago

    First time here, and you typed the link in yourself, bold. Either way, I’ll remember you now. That’s rather the point.how?

    nope, clicked a link on lemmy