You must log in or register to comment.
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 84 users / day
- 537 users / week
- 1.5K users / month
- 6.58K users / 6 months
- 1 subscriber
- 2.3K Posts
- 53.3K Comments
- Modlog
I have been doing fingerprint research for several years. I’ve done countless builds with various browsers, configurations, extensions, and strategies. (Yes i have too much time for this).
Here is what I’ve concluded. I hope this helps someone.
CoverYourTrack is crap, plain and simple. Your best option will always be to randomize. Always. You will not “blend in”. I don’t care if you run Google Chrome on Windows 10 or Safari on iOS, JavaScript exposes way too much info, you will always have a unique fingeprint. Just go play around with fingerprint.com on some normie browser/os setups and you will see what i mean.
You must randomize all the values that you see on sites like browserleaks.com. canvas, audio context, webgl hash, clientrects, fonts, etc etc. I’d also make sure you are proxifying all your browsers and using random locations. You can do this with Brave somewhat, which has some randomization stuff in it. You can do this with browser extensions as well. Ungoogled chromium also has some randomization for canvas and clientrects i think
There are only a couple options outside of this that I recommend, in the realm of “generic fingerprint” solutions. TOR browser (they have been on the front lines of this for many years). And also Mullvad browser, which, despite its generic fingerprint goal, seems to also defeat fingerprint.com.
Tldr, if you want the best experience out of the box that is also very usable, just use Mullvad Browser. They are basically the browser i wished for for like a decade.
When I tried tor it was so painfully slow that I have a difficult time imagining anything using it full time
Yeah mullvad browser plus vpn is the best bet for usability
I personally consider this[1] to be the ultimate test of Browser fingerprint protection coverage. Let me know if you manage to find a way to defeat this test.
[1] https://abrahamjuliot.github.io/creepjs/
Anyone know how I can get improved fingerprinting results on Firefox Android? Currently its at 16.56 bits and it says I have strong protection against web tracking. NoCanvas isn’t availble on Android devices.
This is another good website for Browser leak/privacy settings test.
https://browserleaks.com/
Meh, “Protecting you from fingerprinting?” doesn’t load.
OS: Ubuntu 23.10 | Browser: Firefox 119 | Add-on: No-Script | Misc: AdGuardHome on Raspberry Pi 4B
Edit: Uploaded Full image for Comparison with Mullvad Browser.
Same setup, but with Mullvad Browser
nice
What about the fingerprinting part?
Just use CanvasBlocker, it changes your ID randomly.
https://canvasblocker.kkapsner.de/faq/
It should be noted that canvas is only one method of fingerprinting, so just randomizing that will not be enough to prevent fingerprinting.
Thanks!
No problem, faking instead of blocking canvas is the way to go, for example the new captcha by Cloudflare uses countless queries to check the browsers validity: https://blog.cloudflare.com/turnstile-private-captcha-alternative/
I’m guessing that if you block it sites will either block you entirely or give you a fallback old captcha.
The EFF site is great, it tells you how many bits of information are identifiable.
If you think you have good protection, go to http://fingerprint.com and see if they can track you across multiple visits. This is a commercial fingerprinting company, on their homepage they have a tracking widget to demonstrate how good they are. So it’s always useful to use fingerprint.com to get an empirical test of if you’re trackable.
Good find, 5 checks, 5 first visits! That’s with Brave. With Vanadium and Fennec it figures me out though.
7 visits with brave, 7 times identified as the same. I’m using the default options of a fresh brave install
how did you have such success?
Not sure honestly, I’m always behind a VPN, which I was changing servers, as if it were actually able to fingerprint me that wouldn’t have mattered so I didn’t want a false positive from making it too easy, I do run GrapheneOS so not sure if the OS is either not sending or randomizing OS info on top of that, that it would normally get. Been a while but the only thing I changed from default in Brave was changing fingerprinting to strict. For the sites I visit its still fine 95% of the time so I leave it that way. I’ve read from others and their browsing habits it breaks a ton of sites. So e YMMV there.
using the settings you described ( minus the VPN ) I was not able to cloak myself over the past several days
Visited on my mobile this morning while commuting and no VPN and it geo located me 1000 miles away.
Visited again connected to a WiFi network and it got me right. Fun stuff
Did it track you on a second visit?
Yep, it’s got both visits recorded. Idk why my ip on mobile networks was geolocated so far away.
Thats pretty common for cellular data. Your IP is based on the exit of the mobile network, not the tower you connect with, but the data center of your provider. Which could be thousand of miles away
Today I learned! Thanks for the info :)
My impression is the thing with modern day ad tracking, selling information to spammers, and hackers is, even if you secure your browser tighter than a drum, any one of your browser extensions, which we’ve given permission to read all site data on every site you visit and interact with, could be keeping extensive logs on your activity and selling that away to the highest bidder. Am I understanding that right?
Yes and that’s why you stick to popular FOSS stuff.
And even then, decide if you really need 20 addons really bad, less is better.
I’ve got really good scores. I’m grading a bit on a curve due to mitigations/spoofs already in place for both browsers that fool the scripts effectively.
4.45 bits from Firefox. [“System Fonts” is the worst score]
4.47 bits from LibreWolf. [“AudioContext Fingerprint” is the worst score
Some Measurements are Ignored; reasons within.
User Agent - Flawed. This contains no personally identifiable information and spoofing this often causes compatibility and functionality issues. It is OK to spoof for -MORE- functionality if needed.
WebGL Vendor & Renderer - Spoofed/Blocked Firefox spoofs this via CanvasBlocker and LibreWolf blocks this from being accessed at all. Spoofing allows some websites to feel “satisfied” they have some fingerprint that is otherwise patent nonsense and CanvasBlocker will present the same value to the website/script later if it’s loaded in the same Container/Context.
Screen Size and Color Depth - Spoofed/Blocked Both Firefox and LibreWolf will spoof/randomize/standardize these viewport values back to scripts to preserve privacy. For functionality reasons my LibreWolf installation is my minimal plugin environment. This allows me to quickly and temporarily load a website I might NEED to use without compromising on Privacy while not being forced to troubleshoot which plugins might be preventing the site from loading in Firefox.
System Fonts - LibreWolf Only Spoofed/Blocked Value is Randomized
What settings/addons do you recommend?
I got the same as @mintycactus@lemmy.world using Firefox Focus on IOS. Which I’m rather pleased by
My Librewolf gets strong protection from tracking and it’s fingerprint is common with millions (so not uniquely identifiable).
Well that’s interesting. I’ve read more than one place the having uBlock Origin is “enough” and that adding Privacy Badger is overkill. I’ve also got AdGuard Home running on a Pi-4. I failed all three tests with Vivaldi Nightly and Arc Browser–both with uBO installed…
Simply adding Privacy Badger to the existing setup, suddenly I had “strong web protection”.
[edit] Firefox passed without having to add Privacy Badger.
uBlock Origin + Canvas Blocker is it for me. And Total Cookie Protection enabled, wasm disabled, referer trimmed.
thanks for the tip, i’m already on firefox, but when run it said i had “some protection” for both blocking tracking ads, and blocking invisible trackers, added privacy badgers after reading your post, because why not, and now it says YES for both
17.54 bits of identifying information tho :0
deleted by creator
deleted by creator
I think that’s good, a layer of obfuscation.
What browser is that?
deleted by creator
huh… mobile or desktop?
deleted by creator
If you have something useful to say just skip to that.
edit: regarding the randomized fingerprint result only, spare me the Brave lecture, it’s not going to be my main browser anyway.
deleted by creator
I found this looking around the site:
In order to get this extra level of protection, your browser needs to have a fingerprint which is either:
so common that a tracker can’t tell you apart from the crowd (as in Tor Browser), or
randomized so that a tracker can’t tell it’s you from one moment to the next (as in Brave browser).
Google’s Chrome browser does not provide protection against trackers or fingerprinters in Incognito Mode.
Is there any way to provide randomised fingerprints in Firefox?
Mullvad browser is the best i think
It doesn’t suit me personally, I want more extensions. In particular, I use uMatrix, as it gives a little more flexibility than uBlock Origin even in authormode. I’ve been able to bypass paywalls by targeting elements from a domain, rather than the domain itself. But also there are plenty of quality of life extensions I rely on, eg gestures.
Mullvad is very good out of the box though, I’ll give it that. And I use Mull on Android quite happily (although this does allow more extensions, pretty sure the two aren’t affiliated).
Nah, Mull is a project of the guy that makes the DivestOS android os
Yes, you can do it manually by enabling resistFingerprinting, but the easiest way is to just install LibreWolf browser which is a fork of Firefox. Or Mull which is practically the same thing, but Android.
Use the Canvas blocker extension. It will randomize your fingerprint. So the test will say you have a unique still, but it is random every time.
I’d also like to know this. Hopefully someone can provide some info for us.
Mullvad browser
@auf strong, but freaking fingerprint warning every time