Is there a site like ‘cover your tracks’ for showing that websites can see what extensions I have (as opposed to other fingerprinting)? Thank you 🙃

Check this https://z0ccc.github.io/extension-detector/

But there is no easy way to detect all extensions, instead most popular ones. My Kiwi Browser on Android has only 2 extensions and only uBlock Origin was detected. Firefox won’t leak them at all.

@LWD@lemm.ee
link
fedilink
11Y

This is actually a good point. It’s not just a proof of concept for one extension, either: it’s a proof of concept for a wide array of handpicked ones, and the script for it could easily be shrunken.

Ironic that Firefox protects your extensions better, considering Chrome Manifest V3 (the adblock killer) is locking down so much functionality.

I guess Google is too busy locking down the functionality that people want, than to lock down the functionality that would make people more secure.

removed by mod

This says it only detects chrome extensions, so I am not surprised it doesn’t detect your Firefox extensions. Why do you say that Firefox won’t leak extensions at all? Do you have a source for that?

Atemu
link
fedilink
31Y

Detecting extensions using web accessible resources is not possible on Firefox as Firefox extension ID’s are unique for every browser instance. Therefore the URL of the extension resources cannot be known by third parties.

and also for Chrome:

in manifest v3 extensions will be able to enable ‘use_dynamic_url’ option, which will change the resource URL for each session (browser restart). This will render this detection method unusable.

Though it should be noted that this method isn’t the only way to detect extensions.

Do you mean this issue is going to be solved only with mv3 implementation? That leaves other chromium browsers staying with both mv2 and mv3 with this issue unresolved…

Not really. But the site says it works only with chrome desktop, not firefox desktop. I have Kiwi installed and Firefox as well to test both, Firefox extensions were not detected.

Atemu
link
fedilink
1
edit-2
1Y

The way it’s written doesn’t say whether it simply isn’t made to work for Firefox or whether it couldn’t be made to work for Firefox. Fortunately, the latter appears to be the case.

if you click read more, it mentions that it can’t be made to work with firefox

Not really, because AFAIK extension detection needs to be built on a per-extension basis.

Create a post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

  • 0 users online
  • 57 users / day
  • 383 users / week
  • 1.5K users / month
  • 5.7K users / 6 months
  • 1 subscriber
  • 3K Posts
  • 75.4K Comments
  • Modlog