Fingerprint2

github.com/Valve/fingerprintjs2

whoever created this is a massive piece of shit

Other urls found in this thread:

torproject.org/projects/torbrowser/design/
github.com/ValveSoftware
ipleak.net/
github.com/Valve/fingerprintjs2/issues/258
twitter.com/NSFWRedditImage

Just wait til EFF releases a plugin to block this shit.

I wonder if they'd accept a pull request to "do nothing" if the user has Do Not Track turned on.

Why? They list everything they use for fingerprinting so you can counter it

Valve is obviously to blame

List of fingerprinting sources

>UserAgent
>Language
>Color Depth
>Screen Resolution
>Timezone
>Has session storage or not
>Has local storage or not
>Has indexed DB
>Has IE specific 'AddBehavior'
>Has open DB
>CPU class
>Platform
>DoNotTrack or not
>Full list of installed fonts (maintaining their order, which increases the entropy), implemented with Flash.
>A list of installed fonts, detected with JS/CSS (side-channel technique) - can detect up to 500 installed fonts without flash
>Canvas fingerprinting
>WebGL fingerprinting
>Plugins (IE included)
>Is AdBlock installed or not
>Has the user tampered with its languages
>Has the user tampered with its screen resolution
>Has the user tampered with its OS
>Has the user tampered with its browser
>Touch screen detection and capabilities
>Pixel Ratio
>System's total number of logical processors available to the user agent.

How the fuck do you even begin to counter this level of shit?

>>How the fuck do you even begin to counter this level of shit?
disable JS. Boom, done.

>>DoNotTrack or not
lol

>use librejs and umatrix
Problem solved.

>disable JS. Boom, done.
>Your browser does not have JavaScript enabled. Please enable JavaScript to use $foo

A lot of sites will still show you an article with JS blocked. If you want to watch videos, well, quit being a brainlet who prefers watching to reading.

torproject.org/projects/torbrowser/design/

>quit being a brainlet who prefers watching to reading
LITERALLY a fucking sour grapes argument.
Can't wait for FOSS to crash and burn so these people disappear.

he's calling you a brainlet because you're too stupid to figure out how easy it is to open anything with mpv

They're always able to figure out that my OS is linux despite me spoofing my user agent.

wtf
Valve is not valve valve
but valve literally who valve

github.com/ValveSoftware

wtf i hate russia now

Oh God same here
What's the point using a windows user agent if anysite can see that i am using linux through JS?
Also unlike 8ch Sup Forums need JS for the catalog

post site

User agent changing is only useful to fool simple sites. Changing it only increases entropy and makes you more unique. No, using random user agent doesn't really work.

It's not even correct. Often you can just feed the URL to mpv and watch the video that way.

I never have js enabled for *Tube type sites.

This is so bad, I just don't want to go to any other site besides Sup Forums and you tube anymore.
Man I might as well quit the internet.

Well you can disable first party scripts which should work on random sites.

But I use special snowflake browser.

>But I use special snowflake browser.
If it's something a site can detect using special snowflake browser is only going to make you stand out from the crowd (i.e make you look even more unique and therefore easier to track).

ipleak.net/ just do a test even with a random user agent it can see which os your are using.

There's nothing wrong with this.

Which script should i disable in Sup Forums for example?

What if i use a windows user agent and disable JS?

you fucking up on your side, i'm spoofing my FF as chrome and it picks up chrome

Everything Ublock Origin blocks.

I think it's possible for Sup Forums to be usable with Sup Forums x (with some special settings) and scripts disabled. You probably still need the cdns though. I haven't tried it.

>system information

Some site still make me download .deb software for example even though i have a windows user agent,
Or did you mean everything ublock origin can block?

That works if you don't have JS enabled.

What's about the catalog?

It's probably system information like said. If you look at navigator.oscpu and navigator.platform in the webconsole that gives away Linux. There could be other giveaways too. If you have JavaScript enabled and want to spoof your OS you'll probably have to do more than just changing your useragent.

You can set Sup Forums X to use its own catalog instead of the native one.

>github.com/Valve/fingerprintjs2/issues/258
This faggot complaining about ad blocking lists himself from India

Stay mad.

That's just sad. By all means create fingerprinting software but you should recognise that some people do not want to be tracked. If an adblocker has added it to their lists it's for good reason and if anyone were to deploy the script they'd probably change the filename anyway.

I use it on one site. I discovered gigantic click fraud botnet thanks to this.

Thanks, so what can i do beside disabling JS ?
set general.oscpu.override in firefox and type " Windows10" ?

It's not the dev complaining about it; just some random fag.

Didn't know about this, i'll try it thank you

The dev is clearly immoral.

He's from chicago, so it's your country to blame. If he stayed in russia he'd be just drinking vodka on lavochkas with the rest of us.

web developers will be among the first to go on the day of the shocking calamity

Honestly I don't think you can do anything. There's all sorts of metrics that could be used to detect an OS if someone really wanted to. As a small naive example Mozilla announced WebVR but only on Windows so a developer could use this fact as part of their detection, if WebVR is present you are almost certainly using Windows if it isn't you're using ?

here are the relevant parts from my user.js for firefox.

user_pref("general.appname.override", "Netscape");
user_pref("general.appversion.override", "5.0 (Windows)");
user_pref("general.buildID.override", "20100101");
user_pref("general.oscpu.override", "Windows NT 6.1");
user_pref("general.platform.override", "Win32");
user_pref("general.productSub.override", "20100101");
user_pref("general.useragent.override", "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0");
user_pref("general.useragent.vendor", "");
user_pref("general.useragent.vendorSub", "");
[\code]

Damn it, no i am not using windows i am using Xubuntu.

I don't think I made myself clear. The point I was trying to make is just the act of a feature being present or not present is enough to distinguish between two OS's. For example do you have the ComicSans MS font installed? If you do probably Windows, if you don't then you're using something else, etc...

You can add this to your user.js in firefox to disable system fonts.
user_pref("browser.display.use_document_fonts", 0);
[\code]

This could work i'll add them

Oh and there is plenty of other things that can be used to identify an OS.
shit