| |  | |
| dazller_the_great | 03-15-2020 04:51 PM |
eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
i was making a few tests in the last couple of days , i was using all the plugins i can use to detect whats happening while creating the account ,and when i reach the moment of the javascript test , it clearly shows that ebay is taking my webgl fingerprint , see the pictures , sorry the pictures quality isnt good enough , i just took them fast https://ibb.co/BLZYmxQ https://ibb.co/KNfBXQT https://ibb.co/bvDrf2H https://ibb.co/FhpV4NY https://ibb.co/68tPtCs https://ibb.co/J2QwZYX
canvas fingerprint also was taken but much less frequently, actually only one time while i was creating the account
also paypal take both canvas and webgl fingerprint https://ibb.co/WPmNYQg
also when i opened ebay website first time on the fresh browser ,it started building the cookie and it took a shot of my webgl fingerprint also ,so please stop arguing about that ebay is not doing any fingerprinting ,
what are they doing with this data is another story , but i believe this is clearly the way they link the accounts ,
and it was a bad idea to use a webgl spoofing browser extension , because they do the test many times in raw , and every time they get this they ask to click send again , and it keeps doing it many times , and the account was suspended minutes after that , MC113
the plugin i used is doing a new fingerprint every time the page get refreshed, which is a bad idea in my opinion ,having the fingerprint changed multiple times is clearly making them suspicious
i hope this information helpful for many of you , and i hope some one can help with what is the way to change the fingerprint of webgl without being detected that i'm using a browser extension , |
| ronny209 | 03-29-2020 09:54 AM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
i was not expecting that actually, ebay has made a huge upgrade in its security system but did not expect it would be that important. |
| glacier922 | 03-29-2020 12:36 PM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
So no VMware and fingerprinting, what do we do now? |
| Pandoras_box | 03-29-2020 01:54 PM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
The fact that they collect WebGL, Canvas fingerprint, etc. does NOT mean they use this information AGAINST you.
There are many members here who still use user accounts to run multiple stealth accounts, and they do just fine.
I like your research, but I'm doubtful of the belief part. Stealth is a science and belief is not one of its tools.
If you don't have the necessary information to conclude, leave your research open until you do.
We moved all our accounts from windows\user to VM as a precaution because we did not want to get caught should eBay/PayPal decide to use the information they were harvesting.
It is possible to spawn VMs that are so intricately dissimilar that eBay and Amazon would not stand a chance to link these back to one user - again that's a science, but you have to be a lover of fine details and be patient.
I wonder: if and when they decide to use this sort of information, might they choose a domain as ground zero for testing before implementing it across other regions? If this is so, could this be why US accounts are comparatively harder to stealth at the moment? |
| Doctor453 | 03-29-2020 03:36 PM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by dazller_the_great
(Post 1077518)
i was making a few tests in the last couple of days , i was using all the plugins i can use to detect whats happening while creating the account ,and when i reach the moment of the javascript test , it clearly shows that ebay is taking my webgl fingerprint , see the pictures , sorry the pictures quality isnt good enough , i just took them fast https://ibb.co/BLZYmxQ https://ibb.co/KNfBXQT https://ibb.co/bvDrf2H https://ibb.co/FhpV4NY https://ibb.co/68tPtCs https://ibb.co/J2QwZYX
canvas fingerprint also was taken but much less frequently, actually only one time while i was creating the account
also paypal take both canvas and webgl fingerprint https://ibb.co/WPmNYQg
also when i opened ebay website first time on the fresh browser ,it started building the cookie and it took a shot of my webgl fingerprint also ,so please stop arguing about that ebay is not doing any fingerprinting ,
what are they doing with this data is another story , but i believe this is clearly the way they link the accounts ,
and it was a bad idea to use a webgl spoofing browser extension , because they do the test many times in raw , and every time they get this they ask to click send again , and it keeps doing it many times , and the account was suspended minutes after that , MC113
the plugin i used is doing a new fingerprint every time the page get refreshed, which is a bad idea in my opinion ,having the fingerprint changed multiple times is clearly making them suspicious
i hope this information helpful for many of you , and i hope some one can help with what is the way to change the fingerprint of webgl without being detected that i'm using a browser extension ,
| You can try a few things, firstly get an addon/extension that gives you a ⊗⊗⊗⊗ webgl that doesnt change every time you refresh but keeps showing that ⊗⊗⊗⊗ webgl consistently, and then you can try some program/extension that hides this ⊗⊗⊗⊗ webgl addon so ebay can't see it. |
| DigiCambio | 03-30-2020 03:44 AM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
And this monitoring continues even for my 5 year old Ebay account ! Although firefox blocks their attempts to take it . |
| afincho | 04-01-2020 02:33 AM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
The new Firefox versions have a canvas protections so you should be fine |
| DigiCambio | 04-01-2020 02:46 AM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by afincho
(Post 1081537)
The new Firefox versions have a canvas protections so you should be fine
| And it makes the game more complicated because they will use other methods to track ! |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by afincho
(Post 1081537)
The new Firefox versions have a canvas protections so you should be fine
| Interesting to note. |
| SirTrader | 04-01-2020 09:44 AM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by dazller_the_great
(Post 1077518)
i was making a few tests in the last couple of days , i was using all the plugins i can use to detect whats happening while creating the account ,and when i reach the moment of the javascript test , it clearly shows that ebay is taking my webgl fingerprint , see the pictures , sorry the pictures quality isnt good enough , i just took them fast https://ibb.co/BLZYmxQ https://ibb.co/KNfBXQT https://ibb.co/bvDrf2H https://ibb.co/FhpV4NY https://ibb.co/68tPtCs https://ibb.co/J2QwZYX
canvas fingerprint also was taken but much less frequently, actually only one time while i was creating the account
also paypal take both canvas and webgl fingerprint https://ibb.co/WPmNYQg
also when i opened ebay website first time on the fresh browser ,it started building the cookie and it took a shot of my webgl fingerprint also ,so please stop arguing about that ebay is not doing any fingerprinting ,
what are they doing with this data is another story , but i believe this is clearly the way they link the accounts ,
and it was a bad idea to use a webgl spoofing browser extension , because they do the test many times in raw , and every time they get this they ask to click send again , and it keeps doing it many times , and the account was suspended minutes after that , MC113
the plugin i used is doing a new fingerprint every time the page get refreshed, which is a bad idea in my opinion ,having the fingerprint changed multiple times is clearly making them suspicious
i hope this information helpful for many of you , and i hope some one can help with what is the way to change the fingerprint of webgl without being detected that i'm using a browser extension ,
| Thanks for your research - pretty insightful indeed. Here is my advice:
1 - Websites can indeed see which browser plugins/extensions you're using, so keep that in mind.
2 - Changing your canvas/webgl hash on every request is a terrible idea - avoid it at any cost.
3 - Using a consistent f.a.k.e canvas/webgl hash is only good if your spoofed canvas/webgl hash is indeed natural and realistic. Unfortunately you will not find free tools capable of doing that at the moment. Even most of the paid softwares can't do that either. What they give you is a unique canvas/webgl hash by adding some "noise" to it. This new spoofed canvas/webgl hash will be unrealistic and can be easily detected by security systems. There are very few softwares that can spoof your canvas/webgl hash naturally.
4 - The fact is that no website can track you completely based on your canvas and webgl fingerprints alone - there are many more fingerprints indeed. Visit ( https://amiunique.org) to get a better idea.
5 - It is safer to block/turn off your canvas/webgl/media device fingerprints than to spoof them unnaturally (for most websites). But I don't think eBay/PayPal/Amazon would be happy with such a thing and they can block you if you turn off your fingerprints.
6 - It's probably best to leave your canvas/webgl fingerprint as is and try to change your other fingerprints to make you less likely to be linked. Try changing your OS, your browser type and version, your fonts, your screen resolution, etc..
7 - There are softwares that can spoof your canvas/webgl fingerprints naturally as per my research. This seems to be the most promising solution to make you least likely to be linked. These softwares include AntiDetect 8 and Kameleo (they are NOT cheap).
8 - Keep in mind that even if you do everything else right, you can still be linked by your activity on the website - the same shipping or return address, the same buying or selling behavior, using the same wording in your listings, unfortunately some websites may even track your cursor movements and typing behavior to identify you. So yeah, even if you do everything else right, there's always a catch, and the game remains a gamble nevertheless.
9 - Do I also need to mention that you should couple your fingerprint spoofing technique with good residential IPs (and NOT datacenter IPs) and make sure that everything checks out by visiting some websites such as "browserleaks.com", "whatleaks.com" and "whoer.net" before carrying out any stealth operation. It's important to make sure that you don't have any time zone difference, or any WebRTC or DNS leak.
10 - When you change anything (such as the IP), you should always check the consistency of your fingerprint by visiting the aforementioned websites "browserleaks.com", "whatleaks.com" and "whoer.net" before re-visiting your stealth account. This is to make sure that you don't have any WebRTC or DNS leak through your new IP.
11 - It is important that your proxy's machine is the same as yours. For example, if your profile is set to run on Windows, your proxy's machine should also run on Windows so that you don't have OS inconsistencies. Fun fact: most if not all datacenter VPNs run on Linux, so you will always have OS inconsistencies by using a datacenter VPN. You want to use residential proxies (there are a plethora of providers - I prefer 911.re). But again you want to make sure that your proxy's machine runs the same OS as your profile's user-agent reports. Since residential proxies are real home PCs, most of them run Windows and some of them run Mac OS X. You want to make sure that your proxy's machine runs the same OS as your profile before opening your stealth account - you can check this particular parameter on "whatleaks.com".
12 - What I presented herein is my personal opinion only, and not an endorsement of any third-party. |
| just_smile | 04-01-2020 09:48 AM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by SirTrader
(Post 1081672)
Thanks for your research - pretty insightful indeed. Here is my advice:
1 - Websites can indeed see which browser plugins/extensions you're using, so keep that in mind.
2 - Changing your canvas/webgl hash on every request is a terrible idea - avoid it at any cost.
3 - Using a consistent f.a.k.e canvas/webgl hash is only good if your spoofed canvas/webgl hash is indeed natural and realistic. Unfortunately you will not find free tools capable of doing that at the moment. Even most of the paid softwares can't do that either. What they give you is a unique canvas/webgl hash by adding some "noise" to it. This new spoofed canvas/webgl hash will be unrealistic and can be easily detected by security systems. There are very few softwares that can spoof your canvas/webgl hash naturally.
4 - The fact is that no website can track you completely based on your canvas and webgl fingerprints alone - there are many more fingerprints indeed. Visit ( https://amiunique.org) to get a better idea.
5 - It is safer to block/turn off your canvas/webgl/media device fingerprints than to spoof them unnaturally (for most websites). But I don't think eBay/PayPal/Amazon would be happy with such a thing and they can block you if you turn off your fingerprints.
6 - It's probably best to leave your canvas/webgl fingerprint as is and try to change your other fingerprints to make you less likely to be linked. Try changing your OS, your browser type and version, your fonts, your screen resolution, etc..
7 - There are softwares that can spoof your canvas/webgl fingerprints naturally as per my research. This seems to be the most promising solution to make you least likely to be linked. These softwares include AntiDetect 8 and Kameleo (they are NOT cheap).
8 - Keep in mind that even if you do everything else right, you can still be linked by your activity on the website - the same shipping or return address, the same buying or selling behavior, using the same wording in your listings, unfortunately some websites may even track your cursor movements and typing behavior to identify you. So yeah, even if you do everything else right, there's always a catch, and the game remains a gamble nevertheless.
9 - Do I also need to mention that you should couple your fingerprint spoofing technique with good residential IPs (and NOT datacenter IPs) and make sure that everything checks out by visiting some websites such as "browserleaks.com", "whatleaks.com" and "whoer.net" before carrying out any stealth operation. It's important to make sure that you don't have any time zone difference, or any WebRTC or DNS leak.
10 - When you change anything (such as the IP), you should always check the consistency of your fingerprint by visiting the aforementioned websites "browserleaks.com", "whatleaks.com" and "whoer.net" before re-visiting your stealth account. This is to make sure that you don't have any WebRTC or DNS leak through your new IP.
11 - It is important that your proxy's machine is the same as yours. For example, if your profile is set to run on Windows, your proxy's machine should also run on Windows so that you don't have OS inconsistencies. Fun fact: most if not all datacenter VPNs run on Linux, so you will always have OS inconsistencies by using a datacenter VPN. You want to use residential proxies (there are a plethora of providers - I prefer 911.re). But again you want to make sure that your proxy's machine runs the same OS as your profile's user-agent reports. Since residential proxies are real home PCs, most of them run Windows and some of them run Mac OS X. You want to make sure that your proxy's machine runs the same OS as your profile before opening your stealth account - you can check this particular parameter on "whatleaks.com".
12 - What I presented herein is my personal opinion only, and not an endorsement of any third-party.
|
Why mention kameleo when you have never used it and EVERY seasoned member here who has used it has told you it DOESN'T WORK for stealth.
No one is going to let you get away with advertising a product that doesnt work like this. |
| SirTrader | 04-01-2020 10:15 AM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by just_smile
(Post 1081675)
Why mention kameleo when you have never used it and EVERY seasoned member here who has used it has told you it DOESN'T WORK for stealth.
No one is going to let you get away with advertising a product that doesnt work like this.
| I mentioned AntiDetect 8 before Kameleo (they are the only two softwares I know that are capable of naturally spoofing your canvas/webgl fingerprints). AntiDetect 8 costs $3,000 to purchase the software and a $100 monthly payment to continue using it. Kameleo on the other hand costs only $60 per month, which is still not cheap by any means, but it is far better than the cost of AntiDetect 8 anyway.
I have only shared an objective assessment. Instead of spreading hate you could have contributed positively to this thread. You should be ashamed of yourself indeed. I have mentioned that you can keep using your own canvas/webgl fingerprint and try to spoof the other things to make you relatively less identifiable. I only provided those two solutions for those who'd prefer the extra spoofing. This extra spoofing may be necessary if you plan to perform very similar activities on the website, so that the difference in canvas/webgl can make it a little less suspicious that you're the same person operating those accounts. Spoofing your canvas/webgl is not necessary for all use cases. |
| just_smile | 04-01-2020 11:38 AM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by tinsoldier
(Post 1081676)
Get away with it...the moderators are bumping his posts by positively engaging with him. :redface:
There's more to this 'spat' than meets the eye me thinks.
| You're right, theres no point trying to reason with a shill. :doh: |
| malakas | 04-01-2020 11:49 AM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
I wouldn't use Antidetect either... I bought a trial version of some kind back in 2018 for a few hundred dollars and couldn't get it working properly, so I asked for support. The guy was condescending (constantly telling me that I "had no tech skills") and asked me to allow him to connect to my computer via Teamviewer; he wasn't able to fix it either (despite him telling me I was the one with "no tech skills") but I did notice him hovering the cursor over the Electrum wallet icon in my taskbar... some time after this, the 1 BTC I had in there had been cleared out.
A coincidence? I think not! They're a bunch of crooks and disrespectful to boot. I'm going to laugh however if an Antidetect rep comes in now trying to defend his (ludicrously expensive) scam POS software. |
| SirTrader | 04-01-2020 12:04 PM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by malakas
(Post 1081717)
I wouldn't use Antidetect either... I bought a trial version of some kind back in 2018 and couldn't get it working properly, so I asked for support. The guy was condescending (constantly telling me that I "had no tech skills") and asked me to allow him to connect to my computer via Teamviewer; he wasn't able to fix it either (despite him telling me I was the one with "no tech skills") but I did notice him hovering the cursor over the Electrum wallet icon in my taskbar... some time after this, the 1 BTC I had in there had been cleared out.
A coincidence? I think not! They're a bunch of crooks and disrespectful to boot.
| I haven't found AntiDetect to be user-friendly either. I'm not sure of their latest version (AntiDetect 8) as I haven't had a chance to try it, but I did download a "cracked" copy of its 7.1 version and I couldn't get it to work. It didn't seem to have many of the necessary options either. But I believe you may not have talked to the actual owners of the software. You probably have talked to a scammer or an imposter of some kind. But hey, no one can steal your BTC by having a look at your Electrum wallet icon in the taskbar, now you're just being too paranoid. I sure hope that you did quit TeamViewer after he couldn't help you though. |
| malakas | 04-01-2020 12:08 PM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
The guy who "helped" me (more like helped himself to my funds) I chatted to directly from the chat option on their site. I'm not saying that the act of him hovering over my wallet icon allowed him to steal my BTC (that act was probably just to check my balance) but looking back he did seem a bit too interested in the icon and having done a google it seems a lot of people have had their BTC stolen after allowing someone to connect to them via Teamviewer. |
| SirTrader | 04-01-2020 12:15 PM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by malakas
(Post 1081722)
The guy who "helped" me (more like helped himself to my funds) I chatted to directly from the chat option on their site. I'm not saying that the act of him hovering over my wallet icon allowed him to steal my BTC but looking back he did seem a bit too interested in the icon and having done a google it seems a lot of people have had their BTC stolen after allowing someone to connect to them via Teamviewer.
| What was that website in particular? I do believe it was an imposter website as I have seen many of them myself.
Their official website looks to be this: https://antidetect.org
If you purchased it elsewhere, you received at the best a "cracked" copy if not a maliciously tampered one. |
| malakas | 04-01-2020 12:17 PM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
That's the one. I just opened a chat window to the lower right of the page and was disrespected pretty much immediately... then scammed by the asshole who as it turns out was just as clueless as I was.
It can't be a coincidence, what with him being the only person to ever connect to my computer and his clear interest in my Bitcoin wallet. |
| SirTrader | 04-01-2020 12:23 PM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by malakas
(Post 1081725)
That's the one. I just opened a chat window to the lower right of the page and was disrespected pretty much immediately... then scammed by the asshole who as it turns out was just as clueless as I was.
| Well, I'm sorry that you had such a bad experience with them. To be honest, I don't like their brand at all. Their main audience is in the dark net, and most of their clients are carders (thieves), so you can't expect much. |
| icecolder | 04-01-2020 04:27 PM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Running different EB accounts on different users of pc still works ok. Different users have different fingerprints, as well as separate cookies. EB and PP been collecting fingerprints for several years already. So why to try to invent bicycle again.. |
| Omani | 04-02-2020 01:55 AM |
Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
Quote:
Originally Posted by SirTrader
(Post 1081672)
This is to make sure that you don't have any WebRTC or DNS leak through your new IP.
11 - It is important that your proxy's machine is the same as yours. For example, if your profile is set to run on Windows, your proxy's machine should also run on Windows so that you don't have OS inconsistencies. Fun fact: most if not all datacenter VPNs run on Linux, so you will always have OS inconsistencies by using a datacenter VPN. You want to use residential proxies (there are a plethora of providers - I prefer 911.re). But again you want to make sure that your proxy's machine runs the same OS as your profile's user-agent reports. Since residential proxies are real home PCs, most of them run Windows and some of them run Mac OS X. You want to make sure that your proxy's machine runs the same OS as your profile before opening your stealth account - you can check this particular parameter on "whatleaks.com".
| Is the detection of OS inconsistencies the result of WebRTC/DNS leaks?, or are OS inconsistencies detected regardless of these leaks? |
| All times are GMT -5. The time now is 08:13 PM. | |
vBulletin® Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Ad Management by RedTyger |
