There's an awesome browser fingerprinting demo at amiunique.org

And I'm pleased to catch most (all?) of their fingerprinting techniques :)

webcookies.org/cookies/amiuniq

Follow

@kravietz Oh dear. They are telling me my preferred content language HTTP request header is all time _unique_. Let that sink in. I guess all my paranoia browser addons are useless if I let my browser tell websites that I speak German, British English, American English, and French, in a certain order of preference (no idea why I did that in the first place). 🤦‍♂️

Also, media devices are unique (understandable). Fonts are pretty bad. Oh dear. I guess that would mean disabling JS by default again.

@blipp Precisely, language was my first target too.

User agent was the second but these are quite fragmented too :)

But before you go any further just try with Tor Browser as this is perhaps the furthest you can go (no JS, addons)

@kravietz Good suggestion to try with Tor Browser, will do :)

@blipp
Is JS needed for font fingerprinting or can you just define webfonts as fallbacks to sets of system fonts and check in the server logs which have been loaded?

@kravietz

@guenther @kravietz Good question. At least on this fingerprinting test website, fonts were listed under the category JS. Your proposal for web font tracking sounds plausibel, too.

Sign in to participate in the conversation
chaos.social

chaos.social – a Fediverse instance for & by the Chaos community