News for hackers. Stuff that matters.
Re:Create No-JavaScript friendly sites by jchook on Monday June 22, 2020 @03:58PM (#23605586)
Curious, how do you do fingerprinting without JS? User agent, header order, etc? How well does it work?
Re:Create No-JavaScript friendly sites by Beldin on Monday June 22, 2020 @04:35PM (#23606209)
Basically, each layer of any implementation of the OSI stack will have its own peculiarities. E.g. there's a paper on re-identifying computers via TCP clock drift.

How well they work depends on the amount of effort you're putting in. Since Javascript is easy and offers a very rich attack surface, there seems to be little rain to really plunge the depths of other layers.

Re:Create No-JavaScript friendly sites by paulryanrogers on Monday June 22, 2020 @04:09PM (#23605777)
Panopticlick did some of this with headers included, their order, and their timing. Which of course can be defeated without much loss of features. Tor Browser being one example
Re:Create No-JavaScript friendly sites by ratww on Monday June 22, 2020 @04:39PM (#23606288)
Cookie?
Re:Create No-JavaScript friendly sites by aabbcc1241 on Monday June 22, 2020 @08:29PM (#23608656)
and also transparent pixel