News for hackers. Stuff that matters.
Re:Privacy analysis of Tiktok’s app and website by m463 on Friday December 06, 2019 @04:43PM (#21726259)
I haven't found a way to block canvas fingerprinting. For some reason, I haven't been able to default to block in firefox.

Even with CanvasBlocker the "check your fingerprint" sites still show a unique fingerprint (but canvasblocker has a ton of really obscure options that I don't understand)

Re:Privacy analysis of Tiktok’s app and website by shakna on Friday December 06, 2019 @07:19PM (#21727480)
> Even with CanvasBlocker the "check your fingerprint" sites still show a unique fingerprint (but canvasblocker has a ton of really obscure options that I don't understand)

It always be unique, because it's randomly generated. But every visit will have a completely different unique value, which means that the fingerprint from the canvas is a useless value.

Re:Privacy analysis of Tiktok’s app and website by iudqnolq on Saturday December 07, 2019 @01:49AM (#21728895)
The setting in Firefox about:config privacy.resistFingerprinting includes mitigations for some canvas fingerprinting attacks. It's part of a push to bring into Firefox privacy features from the TOR project.

https://wiki.mozilla.org/Security/Fingerprinting

Re:Privacy analysis of Tiktok’s app and website by dhimes on Friday December 06, 2019 @05:00PM (#21726414)
Could there be some way to randomize the canvas and audio fingerprints? An extension that obfuscates them in some sense by sending false signals?

Edit: Perhaps overloading the toDataURL() function to add random noise. https://browserleaks.com/canvas#how-does-it-work

Re:Privacy analysis of Tiktok’s app and website by rasz on Friday December 06, 2019 @07:58PM (#21727696)

    window.HTMLCanvasElement.prototype.toDataURL = undefined;
    window.CanvasRenderingContext2D.prototype.getImageData = undefined;


kills canvas fingerprinting