News for hackers. Stuff that matters.
Re:Why Gibiru attempts to take the canvas image data of my b... by JulianWasTaken on Saturday December 23, 2023 @02:16PM (#38747170)
Perhaps the link for this post being the homepage of a website that the post title is intimating is a security or privacy risk isn't the greatest idea, regardless of the answer to the question?
Re:Why Gibiru attempts to take the canvas image data of my b... by hosa on Saturday December 23, 2023 @01:32PM (#38746675)
Firefox has blocked their attempt for canvas, why would they need it while most sites don’t ?

n.b. Gibiru is a supposedly private search website based on Google..

Re:Why Gibiru attempts to take the canvas image data of my b... by crumpled on Saturday December 23, 2023 @01:43PM (#38746800)
The obvious answer is browser fingerprinting.

You probably already knew that. I'm just mentioning the missing context of this post.

Re:Why Gibiru attempts to take the canvas image data of my b... by snitch182 on Saturday December 23, 2023 @02:50PM (#38747490)
Yeah, you can fingerprint by using fonts on canvas. The are oh so slightly differently aliased. If i recall correctly.
Re:Why Gibiru attempts to take the canvas image data of my b... by hosa on Sunday December 24, 2023 @05:41PM (#38757731)
Yes I do already know that.. I find it criminal that they call themselves private then take your fingerprint.. Even Google and Bing don’t do that!
Re:Why Gibiru attempts to take the canvas image data of my b... by jp57 on Saturday December 23, 2023 @01:44PM (#38746818)
Browser fingerprinting and/or bot detection (ie. unreasonably small windows.)
Re:Why Gibiru attempts to take the canvas image data of my b... by yjftsjthsd-h on Saturday December 23, 2023 @02:00PM (#38746998)
Why would a bot have an unreasonably small window?
Re:Why Gibiru attempts to take the canvas image data of my b... by araes on Saturday December 23, 2023 @02:20PM (#38747195)
Because then the bot can hide its activity like the Facebook pixel, where it's visibly difficult for human users to detect (while being relatively easy for computers and scripts to detect).

A lot of security is very similar. A camera in the business that is visibly difficult to detect, yet can easily observe movement within the business.

Its also one of the main areas in online interaction lately. Anything that marks an actor as "not a human".

The security arms race has escalated a lot lately, since now bots can write comparably well and pull a fake image to pass face / camera checks, or similar security. You can't do "find the motorcycle" cause now the bots are better than the humans in many cases. The text recognition failed a long time ago, because it quickly devolved into image tests that humans are not actually that great at.

Unfortunately, the entire problem (in my opinion), is trying to secure a realm for human use, that humans are not native to. Computers are better at being computers.

Re:Why Gibiru attempts to take the canvas image data of my b... by kvonhorn on Saturday December 23, 2023 @03:54PM (#38748138)
Because it's running in a $4/month instance w/512MB memory and is rendering its Chrome window in Xvfb, which has been allocated a 640x480 frame buffer.
Re:Why Gibiru attempts to take the canvas image data of my b... by rolph on Saturday December 23, 2023 @02:23PM (#38747220)
conserving resources, by minimizing things it doesnt need.

just what size is unreasonable comes to mind.

i run with 3 displays one of them is tiled with browser windows. -that makes me curious about how many i can tile up until threshold size and the windows start triggering false +ives

Re:Why Gibiru attempts to take the canvas image data of my b... by dvh on Saturday December 23, 2023 @01:55PM (#38746934)
In one of my projects I used it to detect if browser supports blur filter and if not fall back on stack box blur.
Re:Why Gibiru attempts to take the canvas image data of my b... by LanzVonL on Saturday December 23, 2023 @02:15PM (#38747156)
Because they want you to use their site with Tor Browser exclusively, obviously.