News for hackers. Stuff that matters.

z0ccc

Re:uBlock Origin Lite now available on Firefox on Tuesday August 22, 2023 @02:34AM (#37219400)
But Firefox still didn't have to implement the limit.
Re:Proxy Chrome extensions are not going to be usable in MV3 on Monday September 19, 2022 @07:27PM (#32905554)
Like what? I can't imagine firefox has done anything worse then MV3.
Re:Proxy Chrome extensions are not going to be usable in MV3 on Monday September 19, 2022 @03:26PM (#32902758)
> Yes of course, but that probably represents less than 10% of the customers.

Lol how did you come up with 10%? Did you just make it up?

> VPNs don't stop trackers.

Windscribe (and other VPN's) can block trackers. https://blog.windscribe.com/how-r-o-b-e-r-t-works-76d6274460...

Re:Proxy Chrome extensions are not going to be usable in MV3 on Monday September 19, 2022 @02:28PM (#32902030)
What are the other issues with open proxies?
Re:Proxy Chrome extensions are not going to be usable in MV3 on Monday September 19, 2022 @01:34PM (#32901362)
VPN providers won't be able to verify if a user paid for the service.
Re:Proxy Chrome extensions are not going to be usable in MV3 on Monday September 19, 2022 @01:12PM (#32901087)
There are many legitimate use cases of VPN's. Also there are many VPN companies that don't do false advertising such as Windscribe, mullvad or iVPN.
GitHub: https://github.com/z0ccc/extension-fingerprints

Chrome extensions can be detected by fetching their web accessible resources. These are files inside an extension that can be accessed by web pages. The detected extensions can be used to track you through browser fingerprinting.

This website scans over 1000 extensions and shows you the percentage of users that share the same extensions.

I don't think that method would work for detecting extension debugging.
Doesn't seem like this work for detecting the extension.
I'm unsure if that would work for this extension. Do you have a link to an implementation?
How can you detect it?
How can you detect it? Which websites refuse to activate their features if the debugger is active?
What if you're trying to hide your country lol? It also spoofs your locale and user agent. Just because its not something you care about doesn't mean its useless. Also never claimed it was going to change the world or anything. Just thought it was an interesting way to use the debugger api and that some people might find it cool.
Surely this is a case of commenting something that does not to be commented ?

Check out https://vytal.io/. There are many more data points then just the geolocation api.

Chrome extensions can be detected by fetching their web-accessible resources. These are files inside an extension that can be accessed by web pages.

Vytal has no web-accessible resources so it can not be detected.

Recently made this extension and interested in getting some feedback on it.

Vytal can Spoof your timezone, locale, geolocation and user agent. This data can be used to track you or reveal your location.

Most extensions that provide anti-fingerprinting features rely on content scripts to inject script tags into webpages. There are many limitations to script tag injections which you can read about here: https://palant.info/2020/12/10/how-anti-fingerprinting-exten...

Vytal utilizes the chrome.debugger API to spoof this data. This allows the data to be spoofed in frames, web workers and during the initial loading of a website. It also makes the spoofing completely undetectable.

You can test and compare Vytal and other extensions on https://vytal.io

Unfortunately it doesn't work on Firefox since Firefox doesn't support the debugger API. Works on Brave tho.

How is Bhutan a good counterpoint?
Re:Medieval Photoshop on Monday February 21, 2022 @08:09PM (#30422917)
Do you have any sources where I can read more about this practice?