News for hackers. Stuff that matters.
Re:Should the Web Expose Hardware Capabilities? by alkonaut on Wednesday January 06, 2021 @01:11PM (#25660425)
Browsers should have an entropy budget of just a tiny number of bits. It’s not ok to know my screen resolution, it’s not ok to render fonts and read back the pixels. Exposing more hardware capabilities would be used a thousand times for fingerprinting for every time it’s used for a legitimate purpose (just like the canvas pixel readout).
Re:Should the Web Expose Hardware Capabilities? by backing on Wednesday January 06, 2021 @03:09PM (#25661654)
You're so right it is messed up !

Some services even refuse to serve if one changes the UA, which is only one tracking capability. Though a blank or custom UA is worse, everyone should spoof the one in the onion browser.

User agent switch is currently "not available" on android Firefox.