Forum

eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

i was making a few tests in the last couple of days , i was using all the plugins i can use to detect whats happening while creating the account ,and when i reach the moment of the javascript test , it clearly shows that ebay is taking my webgl fingerprint , see the pictures , sorry the pictures quality isnt good enough , i just took them fast
https://ibb.co/BLZYmxQ
https://ibb.co/KNfBXQT
https://ibb.co/bvDrf2H
https://ibb.co/FhpV4NY
https://ibb.co/68tPtCs
https://ibb.co/J2QwZYX

canvas fingerprint also was taken but much less frequently, actually only one time while i was creating the account

also paypal take both canvas and webgl fingerprint
https://ibb.co/WPmNYQg

also when i opened ebay website first time on the fresh browser ,it started building the cookie and it took a shot of my webgl fingerprint also ,so please stop arguing about that ebay is not doing any fingerprinting ,
what are they doing with this data is another story , but i believe this is clearly the way they link the accounts ,

and it was a bad idea to use a webgl spoofing browser extension , because they do the test many times in raw , and every time they get this they ask to click send again , and it keeps doing it many times , and the account was suspended minutes after that , MC113
the plugin i used is doing a new fingerprint every time the page get refreshed, which is a bad idea in my opinion ,having the fingerprint changed multiple times is clearly making them suspicious

i hope this information helpful for many of you , and i hope some one can help with what is the way to change the fingerprint of webgl without being detected that i'm using a browser extension ,

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

i was not expecting that actually, ebay has made a huge upgrade in its security system but did not expect it would be that important.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

So no VMware and fingerprinting, what do we do now?

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

The fact that they collect WebGL, Canvas fingerprint, etc. does NOT mean they use this information AGAINST you.
There are many members here who still use user accounts to run multiple stealth accounts, and they do just fine.

I like your research, but I'm doubtful of the belief part. Stealth is a science and belief is not one of its tools.
If you don't have the necessary information to conclude, leave your research open until you do.

We moved all our accounts from windows\user to VM as a precaution because we did not want to get caught should eBay/PayPal decide to use the information they were harvesting.

It is possible to spawn VMs that are so intricately dissimilar that eBay and Amazon would not stand a chance to link these back to one user - again that's a science, but you have to be a lover of fine details and be patient.

I wonder: if and when they decide to use this sort of information, might they choose a domain as ground zero for testing before implementing it across other regions? If this is so, could this be why US accounts are comparatively harder to stealth at the moment?

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

You can try a few things, firstly get an addon/extension that gives you a ⊗⊗⊗⊗ webgl that doesnt change every time you refresh but keeps showing that ⊗⊗⊗⊗ webgl consistently, and then you can try some program/extension that hides this ⊗⊗⊗⊗ webgl addon so ebay can't see it.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

And this monitoring continues even for my 5 year old Ebay account ! Although firefox blocks their attempts to take it .

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

The new Firefox versions have a canvas protections so you should be fine

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

And it makes the game more complicated because they will use other methods to track !

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Interesting to note.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Thanks for your research - pretty insightful indeed. Here is my advice:

1 - Websites can indeed see which browser plugins/extensions you're using, so keep that in mind.

2 - Changing your canvas/webgl hash on every request is a terrible idea - avoid it at any cost.

3 - Using a consistent f.a.k.e canvas/webgl hash is only good if your spoofed canvas/webgl hash is indeed natural and realistic. Unfortunately you will not find free tools capable of doing that at the moment. Even most of the paid softwares can't do that either. What they give you is a unique canvas/webgl hash by adding some "noise" to it. This new spoofed canvas/webgl hash will be unrealistic and can be easily detected by security systems. There are very few softwares that can spoof your canvas/webgl hash naturally.

4 - The fact is that no website can track you completely based on your canvas and webgl fingerprints alone - there are many more fingerprints indeed. Visit (https://amiunique.org) to get a better idea.

5 - It is safer to block/turn off your canvas/webgl/media device fingerprints than to spoof them unnaturally (for most websites). But I don't think eBay/PayPal/Amazon would be happy with such a thing and they can block you if you turn off your fingerprints.

6 - It's probably best to leave your canvas/webgl fingerprint as is and try to change your other fingerprints to make you less likely to be linked. Try changing your OS, your browser type and version, your fonts, your screen resolution, etc..

7 - There are softwares that can spoof your canvas/webgl fingerprints naturally as per my research. This seems to be the most promising solution to make you least likely to be linked. These softwares include AntiDetect 8 and Kameleo (they are NOT cheap).

8 - Keep in mind that even if you do everything else right, you can still be linked by your activity on the website - the same shipping or return address, the same buying or selling behavior, using the same wording in your listings, unfortunately some websites may even track your cursor movements and typing behavior to identify you. So yeah, even if you do everything else right, there's always a catch, and the game remains a gamble nevertheless.

9 - Do I also need to mention that you should couple your fingerprint spoofing technique with good residential IPs (and NOT datacenter IPs) and make sure that everything checks out by visiting some websites such as "browserleaks.com", "whatleaks.com" and "whoer.net" before carrying out any stealth operation. It's important to make sure that you don't have any time zone difference, or any WebRTC or DNS leak.

10 - When you change anything (such as the IP), you should always check the consistency of your fingerprint by visiting the aforementioned websites "browserleaks.com", "whatleaks.com" and "whoer.net" before re-visiting your stealth account. This is to make sure that you don't have any WebRTC or DNS leak through your new IP.

11 - It is important that your proxy's machine is the same as yours. For example, if your profile is set to run on Windows, your proxy's machine should also run on Windows so that you don't have OS inconsistencies. Fun fact: most if not all datacenter VPNs run on Linux, so you will always have OS inconsistencies by using a datacenter VPN. You want to use residential proxies (there are a plethora of providers - I prefer 911.re). But again you want to make sure that your proxy's machine runs the same OS as your profile's user-agent reports. Since residential proxies are real home PCs, most of them run Windows and some of them run Mac OS X. You want to make sure that your proxy's machine runs the same OS as your profile before opening your stealth account - you can check this particular parameter on "whatleaks.com".

12 - What I presented herein is my personal opinion only, and not an endorsement of any third-party.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Why mention kameleo when you have never used it and EVERY seasoned member here who has used it has told you it DOESN'T WORK for stealth.

No one is going to let you get away with advertising a product that doesnt work like this.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

I mentioned AntiDetect 8 before Kameleo (they are the only two softwares I know that are capable of naturally spoofing your canvas/webgl fingerprints). AntiDetect 8 costs $3,000 to purchase the software and a $100 monthly payment to continue using it. Kameleo on the other hand costs only $60 per month, which is still not cheap by any means, but it is far better than the cost of AntiDetect 8 anyway.

I have only shared an objective assessment. Instead of spreading hate you could have contributed positively to this thread. You should be ashamed of yourself indeed. I have mentioned that you can keep using your own canvas/webgl fingerprint and try to spoof the other things to make you relatively less identifiable. I only provided those two solutions for those who'd prefer the extra spoofing. This extra spoofing may be necessary if you plan to perform very similar activities on the website, so that the difference in canvas/webgl can make it a little less suspicious that you're the same person operating those accounts. Spoofing your canvas/webgl is not necessary for all use cases.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

You're right, theres no point trying to reason with a shill. :doh:

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

I wouldn't use Antidetect either... I bought a trial version of some kind back in 2018 for a few hundred dollars and couldn't get it working properly, so I asked for support. The guy was condescending (constantly telling me that I "had no tech skills") and asked me to allow him to connect to my computer via Teamviewer; he wasn't able to fix it either (despite him telling me I was the one with "no tech skills") but I did notice him hovering the cursor over the Electrum wallet icon in my taskbar... some time after this, the 1 BTC I had in there had been cleared out.

A coincidence? I think not! They're a bunch of crooks and disrespectful to boot. I'm going to laugh however if an Antidetect rep comes in now trying to defend his (ludicrously expensive) scam POS software.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

I haven't found AntiDetect to be user-friendly either. I'm not sure of their latest version (AntiDetect 8) as I haven't had a chance to try it, but I did download a "cracked" copy of its 7.1 version and I couldn't get it to work. It didn't seem to have many of the necessary options either. But I believe you may not have talked to the actual owners of the software. You probably have talked to a scammer or an imposter of some kind. But hey, no one can steal your BTC by having a look at your Electrum wallet icon in the taskbar, now you're just being too paranoid. I sure hope that you did quit TeamViewer after he couldn't help you though.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

The guy who "helped" me (more like helped himself to my funds) I chatted to directly from the chat option on their site. I'm not saying that the act of him hovering over my wallet icon allowed him to steal my BTC (that act was probably just to check my balance) but looking back he did seem a bit too interested in the icon and having done a google it seems a lot of people have had their BTC stolen after allowing someone to connect to them via Teamviewer.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

What was that website in particular? I do believe it was an imposter website as I have seen many of them myself.
Their official website looks to be this:
https://antidetect.org

If you purchased it elsewhere, you received at the best a "cracked" copy if not a maliciously tampered one.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

That's the one. I just opened a chat window to the lower right of the page and was disrespected pretty much immediately... then scammed by the asshole who as it turns out was just as clueless as I was.

It can't be a coincidence, what with him being the only person to ever connect to my computer and his clear interest in my Bitcoin wallet.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Well, I'm sorry that you had such a bad experience with them. To be honest, I don't like their brand at all. Their main audience is in the dark net, and most of their clients are carders (thieves), so you can't expect much.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Running different EB accounts on different users of pc still works ok. Different users have different fingerprints, as well as separate cookies. EB and PP been collecting fingerprints for several years already. So why to try to invent bicycle again..

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Is the detection of OS inconsistencies the result of WebRTC/DNS leaks?, or are OS inconsistencies detected regardless of these leaks?

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

He's clearly a shill, looking at his post all related to that rubbish software he keeps promoting.

Other shills don't make it this far, though - I wonder why he's not been banned.

Allowing him to continue to poison useful conversation can't be right. :noidea:

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

They are different. One can happen without the other. Basically, when you use a datacenter IP (most VPNs), your connection looks to have originated from the VPN server. Most VPN servers (if not all of them) run Linux, so your connection will look to have originated from a Linux computer, while in fact your computer might run Windows or Mac OS X - And THAT is the inconsistency.

When you use a residential IP however, your connection will seem to have originated from the other home computer who's sharing its connection with you. And THAT other home computer most likely also runs Windows or Mac OS X, so you just need to check if it matches your machine's OS to avoid OS inconsistencies.

So you can avoid OS inconsistencies only by using residential IPs (unless you run Linux). But even if you use a residential IP, you will need to check your fingerprint to make sure your proxy's OS is the same as your machine's OS.

There are many residential IP providers. Here is a free one:
https://tuxler.com

I do not recommend Tuxler for running long-term stealth accounts though because even if you purchase the premium subscription that allows you to target specific cities, it's still not very reliable. You can suddenly get disconnected from one IP and you will automatically be assigned another IP closest to your previously chosen location. While it may assign you a new IP in the same city, there's a good chance that you will be moved to another city, which is NOT good.

Tuxler actually uses a pool of IPs provided by its users. Yes, that's right. When you use the app, YOUR own IP also goes in the pool to be shared with someone else, so keep that in mind.

There are many paid residential IP solutions, many of which are NOT cheap. But I've found one with reasonable pricing and sufficient features. Here it is:
https://911.re

Many of these residential IP providers collect their IP pool from SDKs that they put in apps whose developers seek monetization. So for example, an app developer wants to provide its app free of charge to its users, but also wants to gain some income from it. He can place ads on it, but he can also contact one of these proxy providers. The proxy provider agrees to pay the developer a certain monthly amount (probably based on the amount of users the developer can persuade to join the proxy network), then the proxy provider sends the necessary SDK that the developer needs to put in his app to take advantage of its users' connections and resources as proxies. The most ethical way is that the user will be given the option whether to pay for the app, see ads, or let his idle connection and resources be used in a proxy network. So yeah, that's generally how most residential IPs are recruited - the point is that they belong to real home based users and by using those it will appear that you are browsing from a real residential place, and not from some datacenter location.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

By the way, did you have a chance to give Kameleo a try? I think you said you'd report back. I'd be glad to hear back from you on that.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

I tried it.
It was crap.
Several other senior members tried it. They also reported it was crap.
you were told by multiple senior members - go try it yourself. And if you cannot afford it then you realy are in bad shape and shouldn't even be in business.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Can a moderator please take action against "slokor"? I've had enough of him. Just FYI - I am now considering to settle on VirtualBox for my stealth purposes. The cost of Kameleo or any other anti-detect software for that matter is not worth it for me at the moment. I was just curious to hear back from "Omani" if he ever had the chance to give Kameleo a try. No one asked you for anything! This is not the first time you appear out of the blue spreading hate. You should watch your attitude!

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Noone has to ask me.
As an experienced stealthier I offer my advice for free. And when someone such as yourself comes along trying to promote a faulty service I feel obligated to set the record straight and warn the community.
Theres no hate being spread here friend - only truth and accurate information.
Bottom line - Kameleo Is garbage.-Im not the only one who said it. Deal with it.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

[QUOTE=SirTrader;1081672]Thanks for your research - pretty insightful indeed. Here is my advice:


8 -unfortunately some websites may even track your cursor movements and typing behavior to identify you.

THis is too much ??

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Very educational. I didn't know residential IP's are collected in that manner.

Do you know if the OS version can be detected or just OS type? For example; if I was using Ubuntu and the residential IP was Mint, do you think sites like eBay can see the OS version inconsistency?

btw thanks for that tuxler site, pooling IP's from users is a very interesting idea. I'm going to buy a premium package and have a play around with it. How does it grab my IP for it's proxy network? What if I signed up and connected from NordVPN first, it wouldn't be able to grab my IP....or would it?

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Here is my report that I'm afraid will disappoint you:

#1. I decided I don't want to buy a ****ty OS like Windows just for the sole purpose of testing out Kameleo.

#2. I can't get over that they don't have a Linux option!!

#3. Kameleo has ridiculous payment options (Neosurf, Alipay, UnionPay, QIWI, WebMoney)....I mean WTF???

I can't comment on their product because I haven't tried it, nor do I know much about it.

Sorry for not testing Kameleo but the Kameleo team don't make it easy to test their product with no Linux option and fuked up payment options that nobody has heard of.

As an alternative; residential RDP's easily solve the device/browser fingerprinting problem without having to spoof anything.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Tuxler forces you to use your residential connection while using their app. If you use a VPN, Tuxler will kick you out and shows a warning that your IP is not residential. If Tuxler still continues to work after turning on your VPN, then it means that Tuxler bypassed your VPN and it's still being able to access your real residential IP :) Think about it, if it wasn't for that, they wouldn't be able to collect so many residential IPs. In fact, I have never found a datacenter IP in Tuxler. And by the way, you may not need to buy the premium version if you don't need city targeting. The free version only gives you 10 IP changes per day though.

You can check whether an IP is residential by visiting this site:
https://www.ip2location.com/demo/

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Hmmm I'll still keep them in mind. I'll still find a way to use Tuxler. I just wish they had dedicated IP's.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Dedicated residential IP is close to impossible. Even our own residential IPs are not dedicated. We might keep the same IP for utmost a month (it depends on your ISP though).

But if you can alternate between a handful of residential IPs belonging to the same city (and preferably the same ISP and IP range), you should be good. 911 S5 proxies can help you achieve that to a good degree. It has a feature that allows you to mark certain IPs as favorite so that you can use them again. For example, you can alternate between 5-10 residential IPs (in the same city) to run a particular account. There's a good chance at least one of them will be available when you need it.

Residential IPs belong to real users. The user whose IP you're renting might work on their computer for 3 hours and then let it go offline. That's why you'll need a number of IPs to alternate between. If one goes offline, there's a good chance you'll find one of your favorites that's still online. If not, you'll find another IP from the same city and add that to your pool of favorites, too. You can even arrange your favorite IPs in folders so that you know which ones correspond to which one of your accounts. Their software provides some interesting capabilities that I've grown to like. Most of the other residential proxy providers target web scrapers by offering rotating residential IPs, such that your IP changes every 10 minutes for example, which is a terrible idea for running stealth accounts. That's why I like the implementation of 911 S5 proxies. It's not easy to find an implementation similar to its type in the entire industry. I use Tuxler for quick work, it's not good for running stealth accounts as you don't have the choice to reuse IPs.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

Residential RDP? That looks interesting, but I've never heard of it being available. It would be very expensive even if it was. Can you name a provider I can look into?

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

There can be some difference, yes. For example, my Windows 8.1 shows the TCP/IP fingerprint as "Windows (7 or newer)", but my Windows 10 shows it as "Windows (NT kernel)". While I don't think that's going to be much of a problem, the OS version better be a match, too. Keep in mind that more than one OS version can report the same TCP/IP fingerprint. For example, it looks like Windows 7, 8 and 8.1 all report the same "Windows (7 or newer)" TCP/IP fingerprint.

You can check your TCP/IP fingerprint here:
https://browserleaks.com/ip

Make sure to check your TCP/IP fingerprint on your residential connection though to get the real value. If you check it while being on a VPN, it will show the OS of the VPN server, which is most likely Linux.

And by the way, I don't recommend running stealth accounts on Linux. That can in itself raise a red flag right away. How many other innocent users run on Linux? You need to ask that yourself before proceeding.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

No problem, bro.

Re: eBay clearly is monitoring webgl and canvas fingerprint? see the pictures
 

You should be banned for trolling. I'm reporting you now. I've had enough of you!