News for hackers. Stuff that matters.
Re:Privacy analysis of Tiktok’s app and website by iudqnolq on Saturday December 07, 2019 @01:39AM (#21728873)
In Firefox, setting privacy.resistFingerprinting = true in about:config fixes the canvas leak and possibly the audio leak. It's part of a push to bring into Firefox privacy features from the TOR project.

https://wiki.mozilla.org/Security/Fingerprinting

Re:Privacy analysis of Tiktok’s app and website by stinos on Saturday December 07, 2019 @04:09AM (#21729265)
I really want to do this, but last time I checked it also leads to FF sending UTC time back to sites (or something like that), resulting in showing non-local time for your own and other interactions on pretty much all sites like github/slack/... Fairly annoying. I hope this becomes a separate setting at one point.
Re:Privacy analysis of Tiktok’s app and website by arjunbajaj on Sunday December 08, 2019 @04:33AM (#21735079)
I enabled it and Todoist would show me a dialog on every page reload to set my timezone to UTC. After I realized that resistFingerprinting was causing it, I had to disable it.

It would be nice if the settings inside resistFingerprinting were configurable. I understand that the point of it is to make every browser look the same to analytics engine, but having timezones and zoom levels reset is not the best thing.

Re:Privacy analysis of Tiktok’s app and website by jmiserez on Sunday December 22, 2019 @04:21AM (#21856115)
Or file a bug report with Todoist. Showing a dialog on every page is not very user friendly of them.
Re:Privacy analysis of Tiktok’s app and website by animesh on Saturday December 07, 2019 @06:16AM (#21729663)
I don't know about fixing canvas and audioleak, but it reset browser zoom to 100% on every load of any website say HN. This is pretty annoying.
Re:Privacy analysis of Tiktok’s app and website by iudqnolq on Saturday December 07, 2019 @10:44AM (#21730812)
Re:Privacy analysis of Tiktok’s app and website by sgn on Saturday December 07, 2019 @08:05AM (#21730065)
Firefox 58+ blocks canvas by default. We don't need to change about:config for Canvas tracking.

Not sure about the status of AudioContext tracking, though.

Re:Privacy analysis of Tiktok’s app and website by iudqnolq on Saturday December 07, 2019 @10:42AM (#21730805)