Top
Best
New

Posted by royfish 1 day ago

Fingerprints are the new cookies(royfish.dev)
702 points | 341 commentspage 6
jgalt212 10 hours ago|
We have over 10+ years of employing this tech, and we've found fingerprints for a browser are constantly changing. As such, they are far from being a silver bullet when used as a persistent identifier.

Furthermore, in corporate environments where boxes are set up the same for many users, there are often, or too often, two different users and two different boxes with the same exact fingerprint.

pixel_popping 20 hours ago||
Fingerprints are used for over a decade already, nothing new, just users keep closing their eyes despite knowing, even advanced ones.
TZubiri 21 hours ago||
I'm skeptical of this magic trick, maybe add a counter with the amount of times I logged in to the website. Or let me save some data to read it from another session. Otherwise lots of people can be identified by that hash, there's no proof that it is unique
royfish 2 hours ago|
I did want to add a counter and see how my script would perform in the wild! But that'd mean I have to store these fingerprints and that requires a bunch of formalities I don't want on my website.

Anyway, it's a simple script for the sake of demonstration. I'm sure you'll get a different hash on other browsers/devices.

charcircuit 23 hours ago||
>and the solutions Google has developed (Privacy Sandbox) kinda suck and have raised antitrust concerns so nobody uses them.

This is backwards. The antitrust concerns of removing 3rd party cookies led to them developing alternatives.

frenchie4111 7 hours ago||
idk man fingerprints don't taste that good
shevy-java 16 hours ago||
> Let’s give it up for Google - the biggest ad company on Earth

I think Google needs to be forbidden from causing more damage to the EU market. And there need to be replacements too, once we forbid this Evil entity from sabotaging EU citizens any further.

We also need real open browsers not controlled by greedy Ad companies.

I am also aware of the irony of using thorium here right now (based on the adChrome code base). If I use Firefox, I can not listen to audio since mozilla claims only systemd-pulseaudio using people can listen to audio. Well, chrome plays audio on youtube (which is also owned by Google, do people begin to see how big of a problem Google has become) just fine, so I have no idea what Mozilla devs are smoking. I could recompile firefox, to just use ALSA, but who in his right mind wants to compile a 1% usage base legacy browser that uses ancient technology to compile its outdated code base please?

See: https://www.linuxfromscratch.org/blfs/view/svn/xsoft/firefox...

Mozilla gave up decades ago on fighting adGoogle. And it can be seen via small things too.

Ladybird may be a competitor at one point in time but they ban people from their github repository, which also sends the message "do not contribute to us because we don't care about you if you have dissenting opinions". Well, so much for real competition, when projects get all emo early on. You can't beat the evil adGoogle empire with wishful projections about "conduct of people". That's not going to work. I don't subscribe to any random ruleset made by random people I don't know and don't want to know when they resort to censorship. But hopefully more and more people realise that something has to be done about Google one way or another.

howunfortunate 1 day ago||
> See, the thing is, it’s not about you at all. It’s not really about the ads anymore either. Nobody cares about you. And if the police or your government happen to care, I’ll gladly take their money too.

> I look at all this data and I don’t see people. I see patterns. Patterns emerging out of patterns. A living, digital fractal state of the economy, society and human psyche. The crystal ball of the 21st century and it’s made of silicon! That’s the product.

> And to the highest bidder it goes!

> What does that make you then? A gear? An ox? A volunteer?

This does absolutely nothing for me. If this resonates with you, can you explain?

I can understand worry about a tyrannical government, and if you have something like a gambling addiction I can understand about ads. But the meta-level privacy fear about deidentified patterns - I just plain don't get it.

floorsthelimit 1 day ago|
If every website you ever visits knows it is you, exactly what links you clicked on, and what content you viewed, forever, are you truly ok with that?
howunfortunate 1 day ago||
Guaranteed deidentified, as the quote above is talking implying?

It's truly totally ok with me, yes.

(I get the non-anonymized concerns, or risk of becoming non-anonymized, that's not what I'm confused about)

floorsthelimit 23 hours ago||
But you are deanonymized. That’s the entire argument. I’m not sure you understand.
howunfortunate 21 hours ago||
I don't think I do.

Is the implication that the machine knows me so deeply that it doesn't matter if it connect my device ID to my name? That it knows me deeply as a person regardless of what identifiers are used?

If that's what meant, I have to say: 1. That's an absurd overestimation of the current capabilities of adtech 2. Even if it were true, I'm not sure I'd be that bothered by it? What I'm bothered by is what could be done with that intimate knowledge. And if the answer is just "show me the absolute most optimal ads", this doesn't really bother me.

That's why the quote I highlighted confuses me.

chaostheory 21 hours ago|
wow on chrome based browsers, the fingerprint survives even in incognito mode.

On Safari, fingerprinting doesn't survive in incognito mode. Same with Firefox.

Good thing I use different computers for different purposes, though it looks like using different browsers seems sufficient.

pixel_popping 20 hours ago|
It's not true, fingerprinting on Safari is also easy regardless of Incognito, VPN and whatnot.

Different computers doesn't solve a lot of fingerprinting methods as well.

More comments...