Forum

Re: Browser Fingerprinting (Canvas)
 

This would be a red flag then. The browser that I use allows me to change the Canvas fingerprint to a static unique one, so every browser would show a fingerprint, but it's own, which is what you want.

If yours feeds a "modified" version which would defeat the purpose and set a huge red flag. It would be like "WTF... this guys fingerprint changes every time he accesses the site? Riiiiiiiight".

By having a static set canvas and browser fingerprint you're saying, hey it's me, the same guy, and my other accounts? What other accounts? They're unique and static too" - which is what you want; smashcut - you want static browser fingerprint, not dynamic.

Re: Browser Fingerprinting (Canvas)
 

Nice question.

I would say Canvas Defender + WebRTC Leak Prevent + ... anyone else can think of anything to add?

Incase you didn't know, WebRTC leaks your actual IP addresses from behind your VPN, by default.

P.S. tingv001 does make an interesting point.

Re: Browser Fingerprinting (Canvas)
 

Interesting, I did not know anything about WebRTC before, thanks for the share.

I also change useragents for every account, since I use firefox for all of them. This can be done by going to about:config in your browser, then adding a "general.useragent.override" entry and as a value putting random useragent (just google popular user agents).

I am not sure eBay / PP track them but they might as well do so if they aren't doing it now.

Also Mozilla has something called prefetching where it loads data from the links behind the scenes. For example read this one aspect of Firefox:

I figured it's best to disable this too. Here's a guide on how to do it: https://support.mozilla.org/en-US/kb...ic-connections

Re: Browser Fingerprinting (Canvas)
 

Hey tingv001,

I just tried Canvas Defender and this is exactly what it does.

It gives you a unique noise and unique canvas fingerprint per browser. This noise & fingerprint remains static even if you restart the browser.

If you want to change your fingerprint, you go to the plugin, and generate a new noise. Then the noise & fingerprint change, and again, they remain static unless you press the generate new noise button.

Seems like a really useful plugin.

Re: Browser Fingerprinting (Canvas)
 

I see that ideas from "How Canvas Fingerprint Blockers Make You Easily Trackable" article shine through your words. Don't really have to explain them to me :)

Of course, you want to have a different canvas fingerprint in every browser session. It's up to you however how you implement sessions. There are many ways like virtual boxes, portable browsers, different browsers, Multiloginapp.

Canvas Defender doesn't make your fingerprint dynamic. It does exactly what you need: static fingerprint, which masks your real fingerprint.

Re: Browser Fingerprinting (Canvas)
 

Currently yes.

I should note here that there are ways to circumvent browser add-ons like Canvas Defender. As far as I am aware, Amazon and Ebay are not using them. PayPal does. So Canvas Defender wouldn't save you from being fingerprinted by Canvas function readout if PayPal decided to employ this technique.

As of now I don't know any free solutions that could or would work with PayPal.



Flash plugin is also critical and should be disabled. It leaks enormous amount of data.

Besides that, everything depends on how advanced website protection system is. All vanilla browsers leak tons of information. The question is what websites actually analyze it and how.

Re: Browser Fingerprinting (Canvas)
 

I think WebRTC leaks your DNS, But, I don't think this the case with all browsers, Chrome browser certainly leaks but I think you should be ok with Firefox, Best place to test it whoer.net

Interesting, and how can PayPal do this?

Re: Browser Fingerprinting (Canvas)
 

In short: they prevent browser add-ons from modifying page code.

Re: Browser Fingerprinting (Canvas)
 

Really? I did not know that. Do you have more info on this topic?

Re: Browser Fingerprinting (Canvas)
 

Thanks for the read, never seen that but looks pretty decent.

Anyways I was just saying - I do other things that require a ton more stealth than ebay and paypal, I think ebay and paypal for now don't use canvas yet, if they did everyone would have been tagged already.

Re: Browser Fingerprinting (Canvas)
 

Re: Browser Fingerprinting (Canvas)
 

What if we disable "security.csp.enable" value in about:config?

Re: Browser Fingerprinting (Canvas)
 

Guys, you are missing one very very important thing.
WebGL fingerprint.

And canvas defender will not change this value...

Re: Browser Fingerprinting (Canvas)
 

very true, but easly it can be disabled

Re: Browser Fingerprinting (Canvas)
 

This tells you how to remove the WebGL in Firefox and Chrome

Re: Browser Fingerprinting (Canvas)
 

Guys, don't you find it alarming that PayPal bypassess the canvas fingerprint modifying addons?

I.e. no matter how hard you try to spoof your fingerprints, PayPal will have your authentic canvas fingerprint which is unique and will link you

Re: Browser Fingerprinting (Canvas)
 

cheap laptop or phone for each account... problem solved... (for most of us)

Re: Browser Fingerprinting (Canvas)
 

I don't think there is any sense is getting worked up over one method of tracking or one company putting it out. Because any one of these tools could disappear tomorrow and others would just take their place. I am sure that there are dozens, or even hundreds of tracking devices being worked on right how. And more to come every day.

You can count on the fact that the companies who develop these tools, as well as the companies that use them, will be VERY QUIET about their operations. I very much doubt they will be making public announcements about them or offering any real ways to opt-out.

The only way to deal with this is to have a law enacted making it illegal to track any user for any purpose without obtaining the user's permission first. And I don't see this happening anytime soon.

Until then, all we can do is try to stay ahead and share information, like Aspkin has just done.

Re: Browser Fingerprinting (Canvas)
 

Old school tactics

Re: Browser Fingerprinting (Canvas)
 

Hi, if I use a dongle, do I need to still disable WebRTC or is it just for those using VPN?

Re: Browser Fingerprinting (Canvas)
 

I would say not needed when using dongle or regular IP