Forum

Browser Fingerprinting (Canvas)
 

An interesting read on Browser Fingerprinting.. I don't think it's a threat to stealth (you guys are too smart for that) but it's a good read: Meet the Online Tracking Device That is Virtually Impossible to Block - ProPublica

List of sites that do online fingerprinting
 

Apparently, ebay and amazon doesn't do it, at least from this list.

Here is the list: https://securehomes.esat.kuleuven.be...cky/index.html

And also, it isn't just about the metadata on your browser and screen settings. The website actually asks your browser to draw a picture which you of course don't see, and from there, it will have a unique types of data that can be extracted from.

Here is more on the story:

http://rt.com/usa/174552-digital-fin...ossible-block/

Re: Browser Fingerprinting (Canvas)
 

Do you think eBay will start using this anytime soon?

Re: Browser Fingerprinting (Canvas)
 

i hope not, but i think it's only a matter of time.

Re: Browser Fingerprinting (Canvas)
 

eBay uses any tracking method that is available and affordable.

Most of us will NOT use different netbooks for each account.

Every day thousands of scammers try to open eBay accounts.

If there is any new method to lock out the cheaters, they will implement.

Re: Browser Fingerprinting (Canvas)
 

Stealth methods will need tweaking if this occurs but concepts will live on

Re: Browser Fingerprinting (Canvas)
 

Indeed, but from what I read from the article is that this idea will not take off. It's not as accurate as current methods:

"AddThis said it rolled out the feature to a small portion of the 13 million websites on which its technology appears, but is considering ending its test soon. “It’s not uniquely identifying enough,” Harris said."

I would guess this means that they will give up as it will cost them money, and no one will want to invest or fund a worse option.

However, interesting read. It looks like it's not problem for stealth for many years at least, and I think this idea will die off due to lack of funds. No one will fund an idea worse than current technologies.

Re: Browser Fingerprinting (Canvas)
 

there are ways to spoof your settings anyway...

Re: Browser Fingerprinting (Canvas)
 

How to disable canvas fingerprinting with Adblock Plus | BGR

I wouldn't worry about it.. I just pointed it out because I thought it was interesting. I'm a geek like that. If you are concerned, Ad Block Plus has your back.

Re: Browser Fingerprinting (Canvas)
 

I was thinking AdBlock Plus was malware...sigh

Re: Browser Fingerprinting (Canvas)
 

I haven't heard too many good things about ad block?

Re: Browser Fingerprinting (Canvas)
 

use your nose ;]

Re: Browser Fingerprinting (Canvas)
 

AdBlock Plus is amazing... I wouldn't use the Internet any other way...

https://adblockplus.org/

Re: Browser Fingerprinting (Canvas)
 

You gave it the thumbs up bigboss - am going to implement it right away hah

Re: Browser Fingerprinting (Canvas)
 

Also a decent plugin for FireFox to block it:
https://addons.mozilla.org/en-US/fir...ingerprinting/

Re: Browser Fingerprinting (Canvas)
 

I also use this plugin for my stealth accounts.

Re: Browser Fingerprinting (Canvas)
 

Does this block the Canvas request or create a new one? The browser I bought allows me to choose a unique static Canvas also lets me choose what plugins I want spoofed as well as pretty much everything else you can think of.

Re: Browser Fingerprinting (Canvas)
 

Will adblocker plus effect the cookies that paypal and ebay leave to identify your computer so you will constantly have to verify its you?

Which settings do you enable?

? Enabled Adblock Warning Removal List
× Enabled EasyList Last
× Enabled EasyPrivacy
× Enabled Fanboy's Social Blocking List
× Enabled Malware Domains

Re: Browser Fingerprinting (Canvas)
 

A lot of these add ons are more trouble than they're worth because websites can see that you're using them which makes you stand out even more.
Imagine you're in a room with five people one of whom is wearing a ski mask, You can't see his face, But, He sticks out like a sore thumb

Re: Browser Fingerprinting (Canvas)
 

But do you use it with your stealth accounts? And if you do... all or just some?

Re: Browser Fingerprinting (Canvas)
 

I work in the company, which developed Canvas Defender add-on, so can answer some questions here.

Canvas Defender doesn't block Canvas request. It creates 'noise', which masks you real canvas fingerprint. Nothing happens on websites, which don't try to read canvas function output. Howeer, if some website tries to do that, Canvas Defender feeds it a modified version of the fingerprint.

This is exactly the problem SOLVED by Canvas Defender.

Re: Browser Fingerprinting (Canvas)
 

Would you say canvas defender is the only thing needed to stop canvas fingerprint tracking in case eB/PP implements it?

Re: Browser Fingerprinting (Canvas)
 

This would be a red flag then. The browser that I use allows me to change the Canvas fingerprint to a static unique one, so every browser would show a fingerprint, but it's own, which is what you want.

If yours feeds a "modified" version which would defeat the purpose and set a huge red flag. It would be like "WTF... this guys fingerprint changes every time he accesses the site? Riiiiiiiight".

By having a static set canvas and browser fingerprint you're saying, hey it's me, the same guy, and my other accounts? What other accounts? They're unique and static too" - which is what you want; smashcut - you want static browser fingerprint, not dynamic.

Re: Browser Fingerprinting (Canvas)
 

Nice question.

I would say Canvas Defender + WebRTC Leak Prevent + ... anyone else can think of anything to add?

Incase you didn't know, WebRTC leaks your actual IP addresses from behind your VPN, by default.

P.S. tingv001 does make an interesting point.

Re: Browser Fingerprinting (Canvas)
 

Interesting, I did not know anything about WebRTC before, thanks for the share.

I also change useragents for every account, since I use firefox for all of them. This can be done by going to about:config in your browser, then adding a "general.useragent.override" entry and as a value putting random useragent (just google popular user agents).

I am not sure eBay / PP track them but they might as well do so if they aren't doing it now.

Also Mozilla has something called prefetching where it loads data from the links behind the scenes. For example read this one aspect of Firefox:

I figured it's best to disable this too. Here's a guide on how to do it: https://support.mozilla.org/en-US/kb...ic-connections

Re: Browser Fingerprinting (Canvas)
 

Hey tingv001,

I just tried Canvas Defender and this is exactly what it does.

It gives you a unique noise and unique canvas fingerprint per browser. This noise & fingerprint remains static even if you restart the browser.

If you want to change your fingerprint, you go to the plugin, and generate a new noise. Then the noise & fingerprint change, and again, they remain static unless you press the generate new noise button.

Seems like a really useful plugin.

Re: Browser Fingerprinting (Canvas)
 

I see that ideas from "How Canvas Fingerprint Blockers Make You Easily Trackable" article shine through your words. Don't really have to explain them to me :)

Of course, you want to have a different canvas fingerprint in every browser session. It's up to you however how you implement sessions. There are many ways like virtual boxes, portable browsers, different browsers, Multiloginapp.

Canvas Defender doesn't make your fingerprint dynamic. It does exactly what you need: static fingerprint, which masks your real fingerprint.

Re: Browser Fingerprinting (Canvas)
 

Currently yes.

I should note here that there are ways to circumvent browser add-ons like Canvas Defender. As far as I am aware, Amazon and Ebay are not using them. PayPal does. So Canvas Defender wouldn't save you from being fingerprinted by Canvas function readout if PayPal decided to employ this technique.

As of now I don't know any free solutions that could or would work with PayPal.



Flash plugin is also critical and should be disabled. It leaks enormous amount of data.

Besides that, everything depends on how advanced website protection system is. All vanilla browsers leak tons of information. The question is what websites actually analyze it and how.

Re: Browser Fingerprinting (Canvas)
 

I think WebRTC leaks your DNS, But, I don't think this the case with all browsers, Chrome browser certainly leaks but I think you should be ok with Firefox, Best place to test it whoer.net

Interesting, and how can PayPal do this?

Re: Browser Fingerprinting (Canvas)
 

In short: they prevent browser add-ons from modifying page code.

Re: Browser Fingerprinting (Canvas)
 

Really? I did not know that. Do you have more info on this topic?

Re: Browser Fingerprinting (Canvas)
 

Thanks for the read, never seen that but looks pretty decent.

Anyways I was just saying - I do other things that require a ton more stealth than ebay and paypal, I think ebay and paypal for now don't use canvas yet, if they did everyone would have been tagged already.

Re: Browser Fingerprinting (Canvas)
 

Re: Browser Fingerprinting (Canvas)
 

What if we disable "security.csp.enable" value in about:config?

Re: Browser Fingerprinting (Canvas)
 

Guys, you are missing one very very important thing.
WebGL fingerprint.

And canvas defender will not change this value...

Re: Browser Fingerprinting (Canvas)
 

very true, but easly it can be disabled

Re: Browser Fingerprinting (Canvas)
 

This tells you how to remove the WebGL in Firefox and Chrome

Re: Browser Fingerprinting (Canvas)
 

Guys, don't you find it alarming that PayPal bypassess the canvas fingerprint modifying addons?

I.e. no matter how hard you try to spoof your fingerprints, PayPal will have your authentic canvas fingerprint which is unique and will link you

Re: Browser Fingerprinting (Canvas)
 

cheap laptop or phone for each account... problem solved... (for most of us)