News for hackers. Stuff that matters.
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by oftenwrong on Wednesday March 06, 2019 @07:48PM (#19324611)
Some would take enhanced privacy over properly-functioning sites. I wonder how broken sites would appear if the browser simply lied about such things.
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by Tsubasachan on Thursday March 07, 2019 @04:43AM (#19326760)
Wonder no longer. There is an add-on for FF called canvasblocker.

https://github.com/kkapsner/CanvasBlocker/releases

I have been using it and it makes some websites go nuts and Google CAPTCHA takes forever.

Re:Firefox to add Tor Browser anti-fingerprinting technique ... by dymk on Thursday March 07, 2019 @01:45AM (#19326034)
There’s like a billion side channels to determine how big the screen is unless you just want to entirely break basic css. Which is a pretty unreasonable way to address this problem.
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by oftenwrong on Thursday March 07, 2019 @05:41AM (#19327030)
I block CSS altogether on most sites with uMatrix, so I do not think it is that unreasonable.
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by rocho on Thursday March 07, 2019 @06:09AM (#19327153)
Doesn't that make most sites unusable?
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by oftenwrong on Thursday March 07, 2019 @07:20AM (#19327412)
Surprisingly, most sites are perfectly usable with CSS disabled. They end up looking a bit like "motherfucking website"[1], or what you see in a text-based web browser.

[1] https://motherfuckingwebsite.com/

Re:Firefox to add Tor Browser anti-fingerprinting technique ... by blattimwind on Thursday March 07, 2019 @07:24AM (#19327430)
Disabling both CSS and JS actually works around usability issues on a bunch of sites ¯\_(ツ)_/¯

It's like reader mode, except it works on more sites.

Re:Firefox to add Tor Browser anti-fingerprinting technique ... by def_true_false on Thursday March 07, 2019 @06:21AM (#19327195)
Wouldn't loading all external links right away (think background-image) solve this? How does the site exfiltrate the gathered information without javascript or tracking pixels?

Edit: Having a bunch of html buttons/links, showing a different to agents based on their resolution and waiting to see which ones they follow would break this, unless everyone crawls a lot of stuff they don't need. Pretending to be one of a few common sizes is probably a better solution.

Re:Firefox to add Tor Browser anti-fingerprinting technique ... by daveFNbuck on Thursday March 07, 2019 @02:13AM (#19326138)
People with that preference usually just turn off javascript.
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by oftenwrong on Thursday March 07, 2019 @05:44AM (#19327046)
...and they would still be susceptible to CSS-based fingerprinting.
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by cortic on Thursday March 07, 2019 @08:19AM (#19327760)
How? Admittedly my knowledge of CSS is dated, but without scripting enabled you can't set cookies, make auto server request, or even auto set an external CSS file (that could be served and counted)..

Its not something I've considered before and i am genuinely curious how this would work.

Re:Firefox to add Tor Browser anti-fingerprinting technique ... by detaro on Thursday March 07, 2019 @08:23AM (#19327786)
You can make server requests by loading images and fonts. Browsers only load those resources they actually need, so there's lots of opportunities for conditionally triggering requests. Media queries for window size, fallback fonts to check installed fonts, css feature checks to make guesses at the browser type, ...
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by enriquto on Thursday March 07, 2019 @11:03AM (#19329122)
oh my god, what a world we live in!