It didn't work between firefox and chromium on my linux desktop, even trying the chromium branch. But my linux desktop already puts me into a pretty small bucket of users to begin with, so someone who's doing this may not see any joy in trying to fix that.
Linux is tricky. Mostly because Chrome opens applications through `xdg-open`. Custom configuration on Firefox may also affect the result.
It still may not work for your browser with a custom configuration. Also, it is better not to make any gestures during the process.
https://github.com/fingerprintjs/external-protocol-flooding/...
https://609d9f4d79c4f6000700782c--boring-visvesvaraya-dbefd4...
Good to know who the offenders are, Spotify and Skype. Everything else I uninstalled was actually uninstalled.
Makes me wonder if Windows is somehow pre-installing custom scheme handlers for these, whether you have them or not. As far as I know, Skype comes with Windows, so there is no way to test a fresh installation that never had it at all, but Spotify? Is there anyone using a completely clean fresh Windows installation that can test if this demo thinks it is installed even though it isn't?
EDIT: the "special branch" also didn't work
Wonder is it possible to replace the popup by an iframe?
The accuracy can be low because of:
- Custom browser settings or flags - The demo was designed for the default setup, but that doesn’t mean your custom setup is not vulnerable.
- Poorly performant hardware (including virtual machines) - Some timings are just hardcoded and were tested on the MacBook hardware.
- Fullscreen mode - The demo will work faster and more accurate if the browser is not in a fullscreen mode
- Slow internet connection
- Gestures during the process
Also, we haven’t looked into Opera yet, but we may if you ask to do it.
For the technical questions or bug reports consider using Github Issues