News for hackers. Stuff that matters.
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by jraph on Thursday May 13, 2021 @04:40PM (#27147144)
On Linux:

- in Firefox, it detected Epic Games Telegram Discord Battle.net Xcode NordVPN Sketch Teamviewer Microsoft Word WhatsApp Postman Adobe Messenger Figma Hotspot Shield ExpressVPN Notion iTunes, none of which I have installed. It didn't detect VSCode though I have VSCodium.

- On Chromium, it warned it would not work well on Chrome on Linux. It incorrectly detected all the apps. It seems that the browser would try to open the links with xdg-open.

Clever hack anyway!

Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by DistressedDrone on Thursday May 13, 2021 @06:43PM (#27148426)
Using Firefox on Linux, it detected all the apps (very few of which I have) except Skype (correct, I don't have it).

Security through obscurity does it again!

Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by valve1 on Thursday May 13, 2021 @05:40PM (#27147829)
Thanks for testing it on Linux. We only tested it on these browser + OS combinations: https://github.com/fingerprintjs/external-protocol-flooding#...
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by jraph on Friday May 14, 2021 @01:46AM (#27151144)
if you need more info: Firefox 88.0.1 (64 bits), Chromium 90.0.4430.93, on openSUSE Tumbleweed
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by psanford on Thursday May 13, 2021 @08:37PM (#27149273)
Also Chrome on Linux. For me it says it detected 11 apps installed, but I don't have any of those apps installed. Strange.

Edit: With firefox it is able to correctly detect 3 installed desktop applications.

Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by jeltz on Friday May 14, 2021 @02:46AM (#27151474)
Yup, it was broken for me too on Linux unless I somehow have managed to install both Xcode and MS Word. :)