all 30 comments

sorted by: hot top controversial new old
[–] 1 point 7 hours ago

But Fred Durst did it all for the cookie!

  • source
  • [–] 4 points 1 day ago

    Almost all of the data it showed me was inaccurate, whew. Firefox doing a good job there.

    That helps less than you'd think, fingerprinting doesn't need to be accurate,

    incorrect, it needs to be very accurate if it's actually going to track you. If you block tracking scripts and all a website can do is fingerprint you then they're getting nothing besides "you read this article" or "you visited this page" with no way to sell that data. noticeably the ad sales section was almost completely empty for me. If a single bit of my information changes the previous fingerprint was completely useless.

    also this site is just making shit up 😂

    output when I typed a single letter at a type with half a second between each, and quit the sentence as soon as it said I could:

    Your typing rhythm is steady and practised, you spend a lot of time at a keyboard.how? You type at about 45 words a minute.how?

    output when I typed full speed

    Your typing rhythm is uneven, hunt-and-peck, or you were distracted.how? You type at about 105 words a minute.how?


    Timezone America/Denver 0.8% of people - 1 in 297,619

    is just laughably incorrect though. maybe it's based on how many people have actually visited the site like that? but most people have multiple devices, if not a work computer and cell phone at minimum. that would mean only 150k people have America/Denver as their time zone, when the reality is probably 10-15 million, so this number is actually more like 1 in 20-30million


    firefox nicely randomizes output between runs, so it was 16core the first time, 8 core the second time.


    finally this "1 in x" is just laughably wrong. it always says 1 in 133.2 million, even if I give it more data like the size of my screen (which is 1 in tens of millions).

    not saying that fingerprinting doesn't work, it obviously does, but this site is shit and doesn't prove that point at all.

  • source
  • [–] 37 points 2 days ago (10 children)

    >connects to site with NoScript  
    >nothing loads  
    >checkmate 😎

  • source
  • hideshow 10 child comments
  • [–] 4 points 1 day ago* (6 children)

    This is actually much worse for privacy than leaving everything stock, because a site can tell you aren't downloading or running any javascript, and that immediately puts you in an extremely tiny bucket of people it needs to differentiate from, making any differences visible via IP/TCP/TLS/HTML/CSS much more unique.

    And yes, fingerprinting is possible with just HTML and/or CSS... I would argue even moreso without JS.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 18 hours ago (5 children)

    Fingerprinting can usually identify you uniquely. So even if only two people in the world were using NoScript, it would still be more private than getting fingerprinted.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 1 point 12 hours ago (4 children)

    IMO "more private" is pointless when you're still unique either way

  • source
  • parent
  • hideshow 4 child comments
  • [–] 0 points 9 hours ago (3 children)

    If you use Tor + NoScript, you won't be unique. You'll blend in with the other Tor + NoScript users, of which there's probably hundreds

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 1 day ago

    First time here, and you typed the link in yourself, bold. Either way, I'll remember you now. That's rather the point.how?

    nope, clicked a link on lemmy

  • source
  • [–] 2 points 1 day ago
    [–] 12 points 2 days ago (10 children)

    Is there a fingerprint randomizing browser or plugin yet? Last time I lazily researched it there just wasn't one good enough, I keep limping along with ublock and umatrix and all that.

  • source
  • hideshow 10 child comments
  • [–] 11 points 2 days ago (9 children)

    AFAIK (which isn't much), LibreWolf does this by standardizing all it's 'outputs' so no one can tell either browser apart. As long as you don't change anything that is.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 3 points 1 day ago*

    Other than that the site can tell it is Librewolf.
    Although, I opened amiunique.org in 2 different ways and the audio data and canvas footprints were showing up to be unique in both. So unless they are randomising it on every start, it is not standard enough.

    While on firefox (on a close enough version), the Audio data was coming unsupported, which made it ~30% similarity ratio. On checking now though, the Audio data is visible with firefox.

    What made my browser unique was the Canvas and the List of fonts. The latter tends to change every now and then without me doing anything special, because I just downloaded too many fonts.

  • source
  • parent
  • [–] 4 points 2 days ago (7 children)

    Giving up umatrix would be hard, but maybe this'd replace DDG for my "I just need this site to work right now" browser 🤔

  • source
  • parent
  • hideshow 7 child comments
  • [–] 7 points 2 days ago* (1 child)

    DON'T BOTHER

    uMatrix ⚠️ No longer maintained, the last release was Sept 2019 except for a one-off patch to fix a vulnerability

    Everything uMatrix did can be covered by prefs or other extensions: use uBlock Origin for any content blocking.

    https://github.com/arkenfox/user.js/wiki/4.1-Extensions#-dont-bother

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 2 days ago* (4 children)

    It's what I always use if I'm ordering anything online, especially if the site I'm interacting with has like 17 different scripts it needs to function properly, or has been shown to play high pitched sounds through your speakers to connect your desktop session with your phone (aliexpress). >..>

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 1 day ago (2 children)

    Ali....

    1. uXDT / ULTRASONIC BEACON TECHNOLOGY PROVIDERS

    Company: SilverPush Country: India / USA Role: Ultrasound-based cross-device tracking and advertising technology. Status: Historically documented; current use of this specific technology has not been confirmed.

    Company: LISNR Country: USA Role: Ultrasonic data transmission and proximity detection. Status: Historically documented technology provider; current uXDT offering not confirmed.

    Company: Shopkick Country: USA Role: Ultrasonic beacons for in-store visit detection and customer rewards programs. Status: Historically documented; current business status requires verification.

    Company: Signal360 Country: USA Role: Ultrasound-based proximity detection and marketing. Status: Historically documented; current operations and uXDT offering not confirmed.

    Company: Audible Magic Country: USA Role: Audio recognition and digital content identification. Status: Mentioned in discussions of the audio-tracking ecosystem; a specific uXDT offering has not been confirmed.

    Company: CopSonic Country: France Role: Ultrasonic communication and proximity technology. Status: Historically documented provider of related ultrasonic technology; current uXDT offering not confirmed.

    Company: Laco Energy Systems / Pointer Country: Germany Role: Ultrasonic communication for digital interactions and proximity-based applications. Status: Provider of related ultrasonic technology; cross-device tracking capabilities have not been confirmed.

    1. COMPANIES / ORGANIZATIONS WITH DOCUMENTED HISTORICAL USE

    Company: Shopkick Country: USA Role: Use of ultrasonic beacons to detect customer visits in retail stores. Status: Historically documented.

    Company: Retail stores using Shopkick beacons Country: Europe (two cities investigated) Role: Ultrasonic signals used to detect nearby smartphones. Status: Signals were detected in 4 of 35 investigated stores. The stores were not fully identified by name in the study.

    Company: Developers of Android apps containing the SilverPush SDK Country: International, including apps distributed in the USA and Europe Role: Integration of ultrasonic functionality for cross-device advertising and tracking. Status: Historically documented. A complete public list of affected apps and customers is unavailable.

    Company: McDo Philippines Country: Philippines Role: Historical app reported in connection with SilverPush technology. Status: Mentioned in historical reports; actual use and timeframe require further verification.

    Company: Krispy Kreme Philippines Country: Philippines Role: Historical app reported in connection with SilverPush technology. Status: Mentioned in historical reports; actual use and timeframe require further verification.

    Company: Pinoy Henyo Country: Philippines Role: Historical app reported in connection with SilverPush technology. Status: Mentioned in historical reports; actual use and timeframe require further verification.

    Company: Civil Service Reviewer Free Country: Philippines Role: Historical app reported in connection with SilverPush technology. Status: Mentioned in historical reports; actual use and timeframe require further verification.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 2 days ago (2 children)

    The receipt

    Putting it together: roughly 1 in 132.1 million browsers look like yours. None of this used a cookie

    Second visit: We've met before

    I've seen you before, you first showed up earlier today. This is visit number 2. And you came straight here, no link, no search. You remembered the URL by heart. That is almost sweet.how?

    And you cleared some of it, 2 of my hiding places were empty when you arrived. I restored them from the ones you missed. This is what tracking looks like without cookies.how?

  • source
  • hideshow 2 child comments
  • [–] 2 points 1 day ago*

    I'm dubious of the stats. Sure if you include China, India, and Africa, your 1in 100M.

    But let's look at it the other way.

    East Coast population: 128M Android: 30% US = 38M

    Primary language English: 77% (realistically for people in US browsing it's closer to 90%)

    = 29 M

    Screen Resolution was wrong.

    But realistically it's identifying your phone model which tend to have unique resolutions. Phones outnumber desktops 8 to 1. So it identified my Pixel which is 4%.

    It claims "Do not track on" is rare at 1 in 186,000 but that's the default for Chrome, Edge, Firefox and Safari.

    So that means I'm in a pool of 1.1M other users.

    Now there are other fingerprints that can narrow it down more, but imo standing in a crowd of over 1M identical people is sort of anonymous.

    Btw, I got the same 1in 132M number that you got.

  • source
  • parent
  • [–] 5 points 2 days ago

    Doesn't remember me using Firefox Focus, which is the point of that browser. Pegged me at 1:119M.

  • source