Privacy analysis of Tiktok’s app and website

Re:Privacy analysis of Tiktok’s app and website by the_pwner224 on Friday December 06, 2019 @03:44PM (#21725802)

I've tried using addons like uMatrix in the past and always gave up, but this just convinced me to deal with the (minor-ish) annoyance they add. Canvas fingerprinting is somewhat well-known and there are browser extensions to block it. But if TikTok is doing audio fingerprinting then you can bet FB, Google, and everyone else are doing it too. JS is too feature-rich to be safely used & allowed.

[ Parent | on HN ]

Re:Privacy analysis of Tiktok’s app and website by rasz on Friday December 06, 2019 @07:51PM (#21727662)

From my quick research running

    if (navigator.mediaDevices) navigator.mediaDevices.enumerateDevices = undefined;

userscript will kill audio fingerprinting, and in many cases just crash fingerprinting script

[ Parent | on HN ]

Re:Privacy analysis of Tiktok’s app and website by m463 on Friday December 06, 2019 @04:43PM (#21726259)

I haven't found a way to block canvas fingerprinting. For some reason, I haven't been able to default to block in firefox.

Even with CanvasBlocker the "check your fingerprint" sites still show a unique fingerprint (but canvasblocker has a ton of really obscure options that I don't understand)

[ Parent | on HN ]

Re:Privacy analysis of Tiktok’s app and website by shakna on Friday December 06, 2019 @07:19PM (#21727480)

> Even with CanvasBlocker the "check your fingerprint" sites still show a unique fingerprint (but canvasblocker has a ton of really obscure options that I don't understand)

It always be unique, because it's randomly generated. But every visit will have a completely different unique value, which means that the fingerprint from the canvas is a useless value.

[ Parent | on HN ]

Re:Privacy analysis of Tiktok’s app and website by iudqnolq on Saturday December 07, 2019 @01:49AM (#21728895)

The setting in Firefox about:config privacy.resistFingerprinting includes mitigations for some canvas fingerprinting attacks. It's part of a push to bring into Firefox privacy features from the TOR project.

https://wiki.mozilla.org/Security/Fingerprinting

[ Parent | on HN ]

Re:Privacy analysis of Tiktok’s app and website by dhimes on Friday December 06, 2019 @05:00PM (#21726414)

Could there be some way to randomize the canvas and audio fingerprints? An extension that obfuscates them in some sense by sending false signals?

Edit: Perhaps overloading the toDataURL() function to add random noise. https://browserleaks.com/canvas#how-does-it-work

[ Parent | on HN ]

Re:Privacy analysis of Tiktok’s app and website by rasz on Friday December 06, 2019 @07:58PM (#21727696)

    window.HTMLCanvasElement.prototype.toDataURL = undefined;
    window.CanvasRenderingContext2D.prototype.getImageData = undefined;

kills canvas fingerprinting

[ Parent | on HN ]