News for hackers. Stuff that matters.

A comment on You’re not anonymous. I know your name, email, and company.. Parent comment

Re:You’re not anonymous. I know your name, email, and company. by georgemcbay on Tuesday December 11, 2012 @08:25PM (#4908090)
Considering the development model used by most modern web browsers, I'm pretty certain those who do this type of fingerprinting in the real world will long ago have adjusted their matching algorithms to be aware of this. I doubt they even care if they get a fully unique fingerprint, they probably just define some percentage of matching as being "close enough to a likely match" to report you as being someone they have seen before.

Just mentioning this lest anyone get the wrong idea that setting your browser to update frequently might be a defense.

[ Parent | on HN ]
Re:You’re not anonymous. I know your name, email, and company. by peterwwillis on Tuesday December 11, 2012 @10:17PM (#4908417)
Identity matching algorithms use a fuzzy match to identify users because the only way to get an exact match is with by storing an identifier on the user's machine, or in memory for the duration of the browsing session. A lot of factors can change and it may not significantly alter the weight of the match.
[ Parent | on HN ]
Re:You’re not anonymous. I know your name, email, and company. by sparkie on Wednesday December 12, 2012 @04:38AM (#4909336)
One of the most effective methods of fingerprinting people is to enumerate the fonts they have installed on their machines (via flash). You don't even need the browser version number to uniquely identify most - the only solution is to disable flash.
[ Parent | on HN ]
Re:You’re not anonymous. I know your name, email, and company. by d_j_s on Wednesday December 12, 2012 @05:28AM (#4909455)
As chrome sandboxes flash, I wonder how much hassle it would be to only allow a small subset of fonts through?
[ Parent | on HN ]
Re:You’re not anonymous. I know your name, email, and company. by lucian1900 on Wednesday December 12, 2012 @06:07AM (#4909532)
Most browsers have "run plugins on click" options, very useful in general.
[ Parent | on HN ]