Comment by Cider9986
1 day ago
Fingerprinting is really bad for privacy and the defenses against it are not there. See https://fingerprint.com. Tor Browser defeats it but I don't think there's a highly usable browser like Brave you can use and prevent being tracked by it.
I've been obfuscating my fingerprint with Brave for years, which I selected specifically because it was the browser I was able to do this with, based on my testing of 5 popular browsers, using https://coveryourtracks.eff.org/ as my benchmark.
It does mean that sites that uses 2FA (so every site nowadays) flag me as a coming from a new device each visit, and I have to have my phone nearby every time I want to use my computer, which is quite annoying. If you use GrapheneOS, you can obfuscate your phone too on WiFi networks (and sites, but GrapheneOS not needed for that, just Brave). You can't obfuscate yourself on cellular networks though, unless you have a ton of sim cards you rotate through.
IMO The EFF test is very flawed because it only tests your uniqueness among the other visitors to that site, not the total possible uniqueness from all the bits of data.
I would bet money that Brave cannot defeat CreepJS. The only thing I've ever seen do it, ironically, is Safari in private mode.
Also just using your computer normally and visiting regular websites already tracks you regardless of your browser's privacy abilities, and I promise data brokers don't care what browser you use, your overall online behavior is still unique.
I accept the challenge. What testing did you do to ensure that you were able to defeat CreepJS on Safari private mode? I would like to replicate it and then see if I can do the same on Brave or another browser.
> unless you have a ton of sim cards you rotate through
And phones!
For years, I've been practicing good privacy-hygiene in public. At my doctor's office, I always wear a Groucho Marx moustache to keep them guessing. Before I walk into my bank for a withdrawal, I team up with two of my friends, set them on my shoulders, and throw a trenchcoat over us! I made a fake ID with my birthday on July 4th and my weight as 98 pounds, but my pharmacy is now refusing to fill my prescriptions!
So what sort of benefits are you reaping from your anti-fingerprinting measures?
Your wit mad my day even though we probably won't agree. I appreciate your humor.
> So what sort of benefits are you reaping from your anti-fingerprinting measures?
Mostly pride on knowing that I'm preventing companies from doing to me exactly what I wouldn't consent to if they asked me outright.
Sure its just for ads (mostly). Sure the chances of my data leak leading to a personalized cyber attack are slim (I don't actually believe this but you might). Sure, [niche scenario] [non-zero probability] might be prevented. Sure there is a meatspace equivalent to the cyberspace invasion of privacy.
I wouldn't consent to stalking in meatspace, for any reason, and conveniently to my knowledge no one is stalking me physically. I dont consent to stalking in cyber space either, for any reason, and I do know that companies do, and they make it an unending uphill battle to let them know and force them to not be blatantly disrespectful. So I will make it as hard as possible, within what I think is reasonable, to make it useless or difficult for them to stalk me online.
And yes, online things have affected my physical life, so these niche applications have occurred to me and my efforts have reduced the negative impacts, to a satisfactory level, and I will continue to kick against the pricks, because it works.
> So what sort of benefits are you reaping from your anti-fingerprinting measures?
A better question would be how are you being screwed over if you never bother to try to stop companies from collecting as much data as they possibly can about your private life? It can cost you a job offer, or cause you to pay more than your neighbor for the same products/services. It can get your data leaked, or sold to scammers. Companies use the data they collect on you for things as trivial as deciding how long to you leave you on hold. The more data they have on you, the easier it becomes for them to use it against you.
Feel free to give companies every bit of personal data they want from you. They'll be thrilled to use that information at any time and in any way they think it will benefit them. Until we have laws against surveillance capitalism the only person looking out for your interests is you, but only if you can be bothered. It'll sure help companies take advantage of you if you decide it's not worth trying.
2 replies →
It’s really kind of pointless. They fingerprint you to target ads and that’s it. The valuable data that’s collected and sold can’t be hidden through fingerprint avoidance: anything you actually pay for. Sure there’s privacy cards, but the second you purchase a physical product you have to give up a delivery address and now they’ll just correlate all your disposable emails and privacy cards and whatever else.
Your only option is to never buy anything online and only pay cash.
3 replies →
Wow, that is a seriously impressive demo. I wonder how it’s able to distinguish people using identical hardware and software versions (e.g., iPhones on the same iOS version). It was able to correlate my sessions across multiple independent ISPs, with a VPN, and with Apple’s extra tracking resistance in private mode.
> Wow, that is a seriously impressive demo
https://abrahamjuliot.github.io/creepjs/