Top
Best
New

Posted by royfish 1 day ago

Fingerprints are the new cookies(royfish.dev)
697 points | 336 commentspage 3
bradley13 7 hours ago|
It is offensive that browsers give away so much unnecessary info. What is necessary? Language preference, Javascript (yes/no), screen resolution. Optionally, latest supported html/css versions. That it, nothing else.

I understand Google having Chrome send way more info. Why do all other browsers go along with this?

Make it make sense...

zkmon 6 hours ago||
Why can't a government simply ban all advertising and instead provide a good enough yellow pages service that just provides the specs of the product in a templated way?

Why would it be a good idea to expose unsuspecting citizens to false claims by the sellers?

davidjade 22 hours ago||
Huh, it is different for me on every page refresh. No VPN, etc... just Firefox on Windows with uBlock, CanvasBlocker, and a PiHole. No persistent fingerprint for me!
felixfurtak 21 hours ago|
firefox, ublock and canvasblocker seems to be enough for me. New identity every refresh
nomilk 17 hours ago||
I wonder if a browser extension could be made that inspects your fingerprint and informs you if you're too unique, then one-click to 'correct' those unique items (or at least list them), so you can conveniently go back to being ~anonymous if preferred.
absqueued 11 hours ago||
If you use Firefox, do the following: Use the extension Chameleon (set it to rotate Random profile every minute), had strict mode with JShelter extension.

This royfish blog example, or anyother, including that fingerprint.com gets new value everytime.

jwally 14 hours ago||
Fingerprint.com charges around $0.004 per investigation, and really encourages you to set up a first party proxy - so iOS doesn't nuke storage after 7 days. And even there, unless its a cookie match; your ID usually carries a confidence number.

That should give some hint about how difficult it is to do in real life, at scale.

tonmoy 13 hours ago||
This site gave me the name “Greedy Bison”, but it didn’t say how many other “Greedy Bison” are out there. I’m guessing everyone using the very common device I’m using and using the very common browser that I’m using would get the same name as me
avodonosov 11 hours ago||
Lets hope AI coding agents will let us to modify browsers and OSes quickly. "Remove tracking from Chrome". "Privacy friendly Android, in particular, allow geo location spoofing"
blooalien 1 day ago|
Cookies, in and of themselves, are not bad. Like any tool that can be misused, they're just being abused by a ton of really shitty people in an effort to try to enrich themselves at the expense of others. Cookies do solve a valid problem on the web, that being "How do we maintain 'state' from one page request to the next in a stateless protocol like HTTP(s)?"

Now we have a new (nearly impossible) problem to solve. "How do we prevent bad actors from abusing pretty much any feature of a public system which can possibly be abused, or reliably catch and punish the people who try?"

cesarb 22 hours ago|
> Cookies do solve a valid problem on the web, that being "How do we maintain 'state' from one page request to the next in a stateless protocol like HTTP(s)?"

Don't you people remember how it was done back when web browsers didn't have cookies, or could be configured to reject or ask for each cookie? The server software automatically added a PHPSESSID parameter to every link, containing the session identifier.

Dwedit 21 hours ago|||
The "PHPSESSID" thing is why many message boards couldn't be archived in wayback machine.
TylerE 18 hours ago|||
RFC 2109 predates anything that vaguely resembles PHP, and Netscape (thus, defacto, basically everyone using the internet), had cookies 3 years before the RFC. PHPSESSID wasn't added until PHP 4 in 2000.

If you're going to be a bitchy pedant, you'd damn well better be CORRECT.

More comments...