News for hackers. Stuff that matters.
Re:We found a stable Firefox identifier linking all your pri... by stackghost on Wednesday April 22, 2026 @07:52PM (#47870746)
All fingerprinting is a vulnerability, unless the client opts-in.
Re:We found a stable Firefox identifier linking all your pri... by lmz on Wednesday April 22, 2026 @09:34PM (#47871395)
The opt in checkbox is labeled "Enable Javascript"
Re:We found a stable Firefox identifier linking all your pri... by ranger_danger on Wednesday April 22, 2026 @09:50PM (#47871473)
Re:We found a stable Firefox identifier linking all your pri... by autoexec on Thursday April 23, 2026 @12:02AM (#47872144)
Interestingly when I go to https://noscriptfingerprint.com/ all I see is a blank page. My browser is pretty locked down in other ways which probably helps, but I'm still taking that as a good sign.
Re:We found a stable Firefox identifier linking all your pri... by ranger_danger on Thursday April 23, 2026 @12:47AM (#47872342)
The site seems to have been taken offline, but the code is here: https://github.com/fingerprintjs/blog-nojs-fingerprint-demo/
Re:We found a stable Firefox identifier linking all your pri... by danlitt on Thursday April 23, 2026 @04:07AM (#47873305)
Ridiculous comment. People should not have to choose between functionality and privacy.
Re:We found a stable Firefox identifier linking all your pri... by eimrine on Thursday April 23, 2026 @04:46AM (#47873524)
Implement it then.
Re:We found a stable Firefox identifier linking all your pri... by 7bit on Thursday April 23, 2026 @06:24AM (#47874033)
Ah yes, the age old reply when people exhausted all arguments.
Re:We found a stable Firefox identifier linking all your pri... by eimrine on Thursday April 23, 2026 @02:44PM (#47879800)
The person I have responded wrote the "should have" construction without giving any proofs why is it so. Maybe in the world of pink ponies everyone should have a free bread on the breakfast, but some things might be unintuitive in the our one.
Re:We found a stable Firefox identifier linking all your pri... by 7bit on Thursday April 23, 2026 @07:17PM (#47883485)
Lol u serious?
Re:We found a stable Firefox identifier linking all your pri... by danlitt on Friday April 24, 2026 @06:53AM (#47888404)
Implement what? The internet?
Re:We found a stable Firefox identifier linking all your pri... by zelphirkalt on Thursday April 23, 2026 @05:39AM (#47873787)
Should not, true, but in the case of many websites the reality is that allowing JS means you lost your privacy. Just like one cannot allow webgl and canvas by default any longer. Thanks to all the web devs who helped creating this web dystopia.
Re:We found a stable Firefox identifier linking all your pri... by danlitt on Friday April 24, 2026 @06:52AM (#47888393)
Yes, my point is that this does not mean it is an "opt in checkbox". I appreciate that it allows people to be nasty, it just isn't a "please be nasty" toggle.
Re:We found a stable Firefox identifier linking all your pri... by ZiiS on Thursday April 23, 2026 @07:57AM (#47874688)
You can't go out in public naked and just ask everyone to look away. If you want someone you don't trust to run unvetted general purpose code on your machine you have to accept that you are trading away some privacy. You can sandbox them (wear cloths) but that doesn't give you strict privacy.
Re:We found a stable Firefox identifier linking all your pri... by stackghost on Thursday April 23, 2026 @12:51PM (#47878087)
It's not a binary situation. Lots of fingerprinting is based on e.g. audio or canvas rendering quirks. Browsers should be obfuscating that shit.
Re:We found a stable Firefox identifier linking all your pri... by ZiiS on Thursday April 23, 2026 @05:05PM (#47881983)
100% we should ensure that Browser's restrict fingerprinting as much as posible. I certainly set my Firefox to have many inconviniencies to reduce the fingerprint. I am just saying this is an engineering compromise and the tradeoff will be different for different people. Wishing we can have our cake and eat it dosn't help; you do have to choose between privacy and functionality.
Re:We found a stable Firefox identifier linking all your pri... by danlitt on Friday April 24, 2026 @06:54AM (#47888427)
I do wear clothes (all JS code runs in a sandbox).

This is a bit like saying "you should lock the door to your house" and therefore refusing to prosecute someone who steals from a house with a broken window frame. I did lock my door, and it's still a crime regardless!

Re:We found a stable Firefox identifier linking all your pri... by ZiiS on Tuesday April 28, 2026 @06:42AM (#47932635)
I did not mean to excuse Firefox leaking this identifier or suggest we shouldn't strive to be as secure as possible. I just took issue with the blanket statement "should not have to choose". As well as making the Browser as secure as possible we also have to chose to limit functionality.