News for hackers. Stuff that matters.
Re:Panopticlick by TooCreative on Sunday October 27, 2019 @02:00PM (#21371317)
"17.63 bits of identifying information" for me.

Strange, that they do not make use of the fact that browsers leak your local ip:

https://browserleaks.com/webrtc

This is one of the most glaring privacy holes build right into the browsers.

On the other hand, I am surprised they correctly identify my "platform" as "Linux x86_64". Even though I used a windows user agent. How do they do that?

Also: What does the "Share on Google+" button do? It prompts me to log into Google. What would happen if I do?

Re:Panopticlick by gruez on Sunday October 27, 2019 @02:06PM (#21371368)
>On the other hand, I am surprised they correctly identify my "platform" as "Linux x86_64". Even though I used a windows user agent. How do they do that?

probably because your user agent faker only fakes the http header and not the javascript environment.

try printing out the value of navigator.userAgent or navigator.platform in the developer console.

Re:Panopticlick by TooCreative on Sunday October 27, 2019 @02:23PM (#21371480)
Aha, it is in navigator.platform!

There is even more stuff in navigator, that should not be accessible to the website. For example how much ram my machine has in navigator.deviceMemory, how many cpu cores in navigator.hardwareConcurrency and so on.

Re:Panopticlick by jammygit on Sunday October 27, 2019 @03:05PM (#21371710)
I can see the use for that information, but I don’t like it being broadcast like that
Re:Panopticlick by jdnenej on Sunday October 27, 2019 @06:17PM (#21372787)
The value of it is very high since it allows download pages to show you the correct info for your OS.
Re:Panopticlick by okasaki on Sunday October 27, 2019 @03:42PM (#21371900)
It seems that if you set Firefox's privacy.resistFingerprinting to true, it fills those with fake data.

    >>> navigator.deviceMemory
    undefined
    >>> navigator.hardwareConcurrency
    2
Re:Panopticlick by Arnavion on Sunday October 27, 2019 @06:44PM (#21372940)
privacy.resistFingerprinting has a bunch of useful features (this, letterboxing, etc) that I wish were available under their own dedicated about:config options. I don't want to enable resistFingerprinting because I value being able to use dark mode more.
Re:Panopticlick by jammygit on Sunday October 27, 2019 @03:03PM (#21371702)
I just found out that the game Dead by Daylight seems to collect your font list if you install it. Surely this data goes to some tracking company for fingerprinting...
Re:Panopticlick by adrr on Sunday October 27, 2019 @02:26PM (#21371509)
You can pull os multiple ways including looking at the packets and tcp headers. Also installed fonts will give away OS.
Re:Panopticlick by temp128349 on Sunday October 27, 2019 @07:22PM (#21373120)
To be fair, your IP address cannot be used to track you much [1]. If you are using a VPN anyways, you can (and should) disable WebRTC (the website you linked shows you how).

[1] https://www.privacytools.io/providers/vpn/#info