News for hackers. Stuff that matters.
Re:Browser Fingerprinting: A Survey by wongarsu on Monday May 06, 2019 @08:54AM (#19838939)
You can't get around giving nearly the entirey of the User Agent string simply thorugh feature detection (well, except for the phone model when on mobile). Canvas and WebGL can be fixed by limiting their functionality, or at least that's what Firefox does in the aforementioned mode. Canvas could conceivably be fixed to just behave the same everywhere, but for WebGL you have to limit it to some common denominator to hide the GPU model, so privacy nessesitates less functionality. The list of plugins can be spoofed to be empty. Screen resolution (or more importantly, window size) has to be somewhat accurate because lots of websites use it for responsive design. Firefox can round the window size to the nearest multiple of 200x100 which doesn't break too many things, but that's still far from giving the same value for everyone.

https://wiki.mozilla.org/Security/Fingerprinting

Re:Browser Fingerprinting: A Survey by zzzcpan on Monday May 06, 2019 @08:58AM (#19838983)
> Canvas could conceivably be fixed to just behave the same everywhere, but for WebGL you have to limit it to some common denominator to hide the GPU model

You can just measure performance of those things then.

Re:Browser Fingerprinting: A Survey by bartimus on Monday May 06, 2019 @09:10AM (#19839061)
Unless two browsers are identical there's almost always a way to detect some particularity.
Re:Browser Fingerprinting: A Survey by munk-a on Monday May 06, 2019 @11:59AM (#19840594)
And even if the browsers are identical there are still some ways to detect different user based on client side behavior (assuming JS is enabled, or some particularly crazy CSS)
Re:Browser Fingerprinting: A Survey by wongarsu on Monday May 06, 2019 @09:26AM (#19839162)
Just giving the same value for everyone on the latest version of Firefox using Windows 10 with a maximized window on a 1920p display would seriously hamper fingerprinting. It can still be enough when used with other information (IP, visited sites etc), but at least it would dilute the signal a lot.
Re:Browser Fingerprinting: A Survey by bartimus on Monday May 06, 2019 @10:09AM (#19839519)
Section 3.2 'Advancing fingerprinting' shows some more ways you can find particularities which will be hard to hide.