PrivacyFirst time here, and you typed the link in yourself, bold. Either way, I'll remember you now. That's rather the point.how?
nope, clicked a link on lemmy
Holly f...
Almost all of the data it showed me was inaccurate, whew. Firefox doing a good job there.
That helps less than you'd think, fingerprinting doesn't need to be accurate,
incorrect, it needs to be very accurate if it's actually going to track you. If you block tracking scripts and all a website can do is fingerprint you then they're getting nothing besides "you read this article" or "you visited this page" with no way to sell that data. noticeably the ad sales section was almost completely empty for me. If a single bit of my information changes the previous fingerprint was completely useless.
also this site is just making shit up 😂
output when I typed a single letter at a type with half a second between each, and quit the sentence as soon as it said I could:
Your typing rhythm is steady and practised, you spend a lot of time at a keyboard.how? You type at about 45 words a minute.how?
output when I typed full speed
Your typing rhythm is uneven, hunt-and-peck, or you were distracted.how? You type at about 105 words a minute.how?
Timezone America/Denver 0.8% of people - 1 in 297,619
is just laughably incorrect though. maybe it's based on how many people have actually visited the site like that? but most people have multiple devices, if not a work computer and cell phone at minimum. that would mean only 150k people have America/Denver as their time zone, when the reality is probably 10-15 million, so this number is actually more like 1 in 20-30million
firefox nicely randomizes output between runs, so it was 16core the first time, 8 core the second time.
finally this "1 in x" is just laughably wrong. it always says 1 in 133.2 million, even if I give it more data like the size of my screen (which is 1 in tens of millions).
not saying that fingerprinting doesn't work, it obviously does, but this site is shit and doesn't prove that point at all.
>connects to site with NoScript
>nothing loads
>checkmate 😎
This is actually much worse for privacy than leaving everything stock, because a site can tell you aren't downloading or running any javascript, and that immediately puts you in an extremely tiny bucket of people it needs to differentiate from, making any differences visible via IP/TCP/TLS/HTML/CSS much more unique.
And yes, fingerprinting is possible with just HTML and/or CSS... I would argue even moreso without JS.
Like most of the rest of the internets.
Technically you're referring to the web
It's actually more like a series of tubes...
Is there a fingerprint randomizing browser or plugin yet? Last time I lazily researched it there just wasn't one good enough, I keep limping along with ublock and umatrix and all that.
AFAIK (which isn't much), LibreWolf does this by standardizing all it's 'outputs' so no one can tell either browser apart. As long as you don't change anything that is.
Other than that the site can tell it is Librewolf.
Although, I opened amiunique.org in 2 different ways and the audio data and canvas footprints were showing up to be unique in both. So unless they are randomising it on every start, it is not standard enough.
While on firefox (on a close enough version), the Audio data was coming unsupported, which made it ~30% similarity ratio. On checking now though, the Audio data is visible with firefox.
What made my browser unique was the Canvas and the List of fonts. The latter tends to change every now and then without me doing anything special, because I just downloaded too many fonts.
Giving up umatrix would be hard, but maybe this'd replace DDG for my "I just need this site to work right now" browser 🤔
DON'T BOTHER
uMatrix ⚠️ No longer maintained, the last release was Sept 2019 except for a one-off patch to fix a vulnerability
Everything uMatrix did can be covered by prefs or other extensions: use uBlock Origin for any content blocking.
https://github.com/arkenfox/user.js/wiki/4.1-Extensions#-dont-bother
Okay but what "other extension" let's me hyperactively manage which exact domains I allow requests to? 🙃
It's what I always use if I'm ordering anything online, especially if the site I'm interacting with has like 17 different scripts it needs to function properly, or has been shown to play high pitched sounds through your speakers to connect your desktop session with your phone (aliexpress). >..>
Ah, no official Android version, boo.
Ali....
- uXDT / ULTRASONIC BEACON TECHNOLOGY PROVIDERS
Company: SilverPush Country: India / USA Role: Ultrasound-based cross-device tracking and advertising technology. Status: Historically documented; current use of this specific technology has not been confirmed.
Company: LISNR Country: USA Role: Ultrasonic data transmission and proximity detection. Status: Historically documented technology provider; current uXDT offering not confirmed.
Company: Shopkick Country: USA Role: Ultrasonic beacons for in-store visit detection and customer rewards programs. Status: Historically documented; current business status requires verification.
Company: Signal360 Country: USA Role: Ultrasound-based proximity detection and marketing. Status: Historically documented; current operations and uXDT offering not confirmed.
Company: Audible Magic Country: USA Role: Audio recognition and digital content identification. Status: Mentioned in discussions of the audio-tracking ecosystem; a specific uXDT offering has not been confirmed.
Company: CopSonic Country: France Role: Ultrasonic communication and proximity technology. Status: Historically documented provider of related ultrasonic technology; current uXDT offering not confirmed.
Company: Laco Energy Systems / Pointer Country: Germany Role: Ultrasonic communication for digital interactions and proximity-based applications. Status: Provider of related ultrasonic technology; cross-device tracking capabilities have not been confirmed.
- COMPANIES / ORGANIZATIONS WITH DOCUMENTED HISTORICAL USE
Company: Shopkick Country: USA Role: Use of ultrasonic beacons to detect customer visits in retail stores. Status: Historically documented.
Company: Retail stores using Shopkick beacons Country: Europe (two cities investigated) Role: Ultrasonic signals used to detect nearby smartphones. Status: Signals were detected in 4 of 35 investigated stores. The stores were not fully identified by name in the study.
Company: Developers of Android apps containing the SilverPush SDK Country: International, including apps distributed in the USA and Europe Role: Integration of ultrasonic functionality for cross-device advertising and tracking. Status: Historically documented. A complete public list of affected apps and customers is unavailable.
Company: McDo Philippines Country: Philippines Role: Historical app reported in connection with SilverPush technology. Status: Mentioned in historical reports; actual use and timeframe require further verification.
Company: Krispy Kreme Philippines Country: Philippines Role: Historical app reported in connection with SilverPush technology. Status: Mentioned in historical reports; actual use and timeframe require further verification.
Company: Pinoy Henyo Country: Philippines Role: Historical app reported in connection with SilverPush technology. Status: Mentioned in historical reports; actual use and timeframe require further verification.
Company: Civil Service Reviewer Free Country: Philippines Role: Historical app reported in connection with SilverPush technology. Status: Mentioned in historical reports; actual use and timeframe require further verification.
I WANNA LIVE IN THE WOODS
but shit the woods have all been turned to walmart supercentres
You'll find cameras and drones there, too, and if you look up, you'll see satellites (you'll also find a huge amount of unencrypted data from the military and other sources).
Doesn't remember me using Firefox Focus, which is the point of that browser. Pegged me at 1:119M.
The receipt
Putting it together: roughly 1 in 132.1 million browsers look like yours. None of this used a cookie
Second visit: We've met before
I've seen you before, you first showed up earlier today. This is visit number 2. And you came straight here, no link, no search. You remembered the URL by heart. That is almost sweet.how?
And you cleared some of it, 2 of my hiding places were empty when you arrived. I restored them from the ones you missed. This is what tracking looks like without cookies.how?
I'm dubious of the stats. Sure if you include China, India, and Africa, your 1in 100M.
But let's look at it the other way.
East Coast population: 128M Android: 30% US = 38M
Primary language English: 77% (realistically for people in US browsing it's closer to 90%)
= 29 M
Screen Resolution was wrong.
But realistically it's identifying your phone model which tend to have unique resolutions. Phones outnumber desktops 8 to 1. So it identified my Pixel which is 4%.
It claims "Do not track on" is rare at 1 in 186,000 but that's the default for Chrome, Edge, Firefox and Safari.
So that means I'm in a pool of 1.1M other users.
Now there are other fingerprints that can narrow it down more, but imo standing in a crowd of over 1M identical people is sort of anonymous.
Btw, I got the same 1in 132M number that you got.
I came back 1 min later and it didn't recognize me. Still perfectible. Even though I'm 1 in 200 millions apparently.
