My GPU is reported as simply "Mozilla" by https://abrahamjuliot.github.io/creepjs/.
The number of cores is also set to 4 for everyone using this config and/or Tor.
> It's not going to work, because the fingerprinting script can be (and is often served) from first-party domain.
This may be true, but allowed third party content makes it trivially easy for Google and others to follow people around the Internet through fonts delivery systems among others.
I think it is Ghostry that is faking the responses but I still have a pretty unique fingerprint according to https://abrahamjuliot.github.io/creepjs/
All that said, the main project looks to be open sourced under a GPL3 license, so distrust and verify: https://github.com/ghostery
I have had it installed so long I don't even remember when I did it.
Ill look more into it and perhaps re-evaluate
How do prosecutors in any modern country/state not charge this behavior when done by a website owner?
.. would lead to all modern electronics being illegal, not just web pages with javascript.
Inshallah
In Europe we have the GDPR which does exactly this
Consider the swaths of dark patterns surrounding cookie terror banners. The GPDR language is extremely clear that none of them are legal, but virtually nobody is ever punished.
While the GDPR does not directly prescribe prison sentences, it absolutely enables countries to establish criminal offences for severe data protection violations, and they will clearly extradite!
https://ico.org.uk/about-the-ico/media-centre/news-and-blogs...
https://ico.org.uk/about-the-ico/media-centre/news-and-blogs...
> But ignoring that,
No don't ignore that. When you're so completely wrong about the first thing you say, everything that follows is going to be even more wrong.
> Consider ... cookie ... banners. The GPDR language is extremely clear that none of them are legal
You are confusing the ePrivacy directive (2002/58/EC) with the GDPR (2016/679).
> block all third party content
It's not going to work, because the fingerprinting script can be (and is often served) from first-party domain.
Also imagine if browser didn't provide drawing API for canvas (if you would have to ship your own wasm rendering library). Canvas would become useless for fingerprinting and its usage would drop manyfold. And the browser would have less code and smaller attack surface.