News for hackers. Stuff that matters.

A comment on Vulnerability allows cross-browser tracking in Chrome, Firefox, Safari, and Tor.

Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by rozab on Thursday May 13, 2021 @04:43PM (#27147196)
Does this actually work correctly for anyone? Got wrong results for Firefox and Chrome on Linux (it warns that Chrome probably won't work).

I glanced through the source[0] and my about:config and I noticed I have the dom.block_external_protocol_in_iframes setting enabled. Looks like this could be the mechanism they use? I don't remember enabling it manually.

Otherwise, it could be my tiling window manager messing with detection.

[0]: https://github.com/fingerprintjs/external-protocol-flooding/...

[ Parent | on HN ]
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by kdarutkin on Thursday May 13, 2021 @04:48PM (#27147254)
Any custom settings may affect the result. However default settings will work for the Firefox 88.0.1. Was tested on Windows, Safari and Linux.

Chrome does not work on Ubuntu, since it opens everything with xdg-open and creates confirmation dialog for both installed and not-installed application

[ Parent | on HN ]
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by eulers_secret on Thursday May 13, 2021 @05:21PM (#27147629)
Worked for me on FF 88.0/Kubuntu 21.04. Detected the 2 apps I have installed correctly. I was also unique.
[ Parent | on HN ]
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by kurthr on Thursday May 13, 2021 @04:52PM (#27147298)
I find it interesting that it shows I have Skype installed... when I don't.
[ Parent | on HN ]
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by shadowgovt on Thursday May 13, 2021 @05:36PM (#27147791)
Do you remember ever having Skype installed? Sibling comments suggest that some apps don't properly clean up their URL handlers when uninstalled.
[ Parent | on HN ]
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by jedberg on Thursday May 13, 2021 @04:44PM (#27147209)
It seems that it's not very effective in Linux.
[ Parent | on HN ]
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by valve1 on Thursday May 13, 2021 @04:58PM (#27147380)
Yeah, we tested it on MacOS Big Sur mostly. Nobody on the team had linux so we didn't really test there. It can be made to work with better timings for the measurements etc.
[ Parent | on HN ]
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by samjanis on Saturday May 15, 2021 @08:24AM (#27164559)
Linux Firefox used Schemeflood! v

It's not very effective....

[ Parent | on HN ]
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by Guest81 on Thursday May 13, 2021 @04:56PM (#27147355)
worked for me on firefox and tor.
[ Parent | on HN ]