On Librewolf i got 16.48 bits of information, on TOR browser 10.32 bits, but on Tails I managed to get only 9.3 bits.

https://coveryourtracks.eff.org/

55 points

I’m unique :) this ain’t great

permalink
report
reply
21 points

its ok if your fingerprint changes on every browser startup

permalink
report
parent
reply
7 points

…as long as you are blocking tracking cookies, and aren’t on a session with a website that’s tracking you.

Otherwise, you just have a nice unique hash in your cookies. A password manager could help here.

permalink
report
parent
reply
2 points

A password manager? Could you explain why?

permalink
report
parent
reply
53 points

If you have canvas randomisation turned on (firefox) you’ll always be unique but also not traceable between sessions.

permalink
report
reply
10 points

Yup, canvas is heavily weighted in this test based on the results.

permalink
report
parent
reply
4 points

How do you turn on canvas randomisation in Firefox? I can’t seem to find anything about it.

permalink
report
parent
reply
3 points

I found this in about:config, defaults to true apparently: privacy.resistFingerprinting.randomDataOnCanvasExtract

But you have to enable privacy.resistFingerprinting for it to work first. I enabled that and now the EFF test says “randomized” for the hashes but also Lemmy went from dark to light theme somehow.

permalink
report
parent
reply
2 points

privacy.resistFingerprinting breaks a lot more than just themes. Many of the weird problems reported in Firefox (and forks) are just from enabling it.

It has some pros but also TONNES of cons. Everything from a completely blank page to wrong timestamps to poor textures and so much more. Sometimes you will be flagged as a bot and prompted with literally infinite puzzles, thus effectively banning you from a website.

Some of these problems get fixed but new ones also get born. I personally use it but I also expect breakage and worse performance.

permalink
report
parent
reply
24 points
*

With browser settings that actually let me use the internet in a way that’s not overly cumbersome and annoying, I get 16bits or something and a “nearly unique fingerprint”

permalink
report
reply
9 points

Block any and all ads, then it doesn’t matter that they have your data if they can’t make money off of it (they still will do that by creating data aggregates but you can’t control that)

permalink
report
parent
reply
18 points

"Your browser fingerprint appears to be unique among the 183,614 tested in the past 45 days.

Currently, we estimate that your browser has a fingerprint that conveys at least 17.49 bits of identifying information."

Chat am I cooked?

permalink
report
reply
7 points

Same result here. I’m using Gnome-web, which is already pretty niche, so that probably really lowers my score.

permalink
report
parent
reply
16 points

Am I wrong to assume trying to blend in is a worse and contradictory strategy than trying to actively protect yourself from tracking?

If you want to not be unique, use default setting chrome without adblock. Your browser will look just like anybody else’s, but they will literally know who you are.

On the opposite side of the spectrum, you lock everything down and spike as a very special browser and… that’s all they know.

permalink
report
reply
21 points

Privacy vs. anonymity

permalink
report
parent
reply
3 points

Right. The question is whether they can attach what they know to an identity. Depends on your threat model which goal you need to achieve.

permalink
report
parent
reply
2 points

Not what I meant: https://github.com/arkenfox/user.js/wiki/3.3-Overrides-[To-RFP-or-Not]#-fingerprinting

"If you do nothing on desktop, you are already uniquely identifiable - screen, window and font metrics alone are probably enough - add timezone name, preferred languages, and several dozen other metrics and it is game over. Here is a link to the results of a study done in 2016 showing a 99.24% unique hit rate (and that is excluding IP addresses).

Changing a few prefs from default is not going to make you “more unique” - there is no such thing."

Basically making yourself less unique is impossible so there’s no sensible tradeoff to be made (other than in the context of Tor and Mullvad Browser).

permalink
report
parent
reply
12 points
*

But then they can know a lot more since they don’t even need to drop a cookie to track you. But that’s a different threat model.

permalink
report
parent
reply

Privacy

!privacy@lemmy.ml

Create post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

Community stats

  • 5.4K

    Monthly active users

  • 1.8K

    Posts

  • 27K

    Comments