How can we avoid fingerprinting?
-
You can. Libreworlf with canvas blocker, Chameleon, and a JS blocker.
Canvas blocker and a JS blocker limits a lot of what Google can see and fingerprint per page. And you'll be shocked at first how many pages have google trackers that a JS blocker kills. It's easier to turn things on one at a time than claw back data once it's out of your hands.
Chameleon spoofs a lot of other details, like browser, system time, languages, headers, etc. So for what can be seen, it's always changing and harder to corroborate. This plus moving VPN locations is what is needed.
Also, TOR does the job, but not the most fun internet experience.
Canvas blocker is redundant with Librewolf's protections (privacy.resistFingerprinting), same with JS blocker redundant with uBlock Origin. You make yourself more fingerprintable.
-
And to test whether this works you can visit
How do I read/use this site? What's important?
-
Canvas blocker is redundant with Librewolf's protections (privacy.resistFingerprinting), same with JS blocker redundant with uBlock Origin. You make yourself more fingerprintable.
You're correct. I was thinking of how I have Floorp set up.
CreepJS doesn't see NoScript as an extension and only catches me if I don't switch IPs. Time zone is also worth adjusting of one is serious.
-
How do I read/use this site? What's important?
Load it and it fingerprints your browser. You can add a signature to that fingerprint.
Make whatever changes you want to make to resist fingerprinting and reload the page. If it displays your signature then it has identified you, if not then your changes worked.
Ideally, every page refresh would generate a new unique fingerprint so the page can't link you to the last time you loaded the page (which is what tracking is, essentially)
The site also displays all of the data that it can see, for advanced users
-
I've been worried about this since Google switched to it in Feb this year.
Apparently the short answer is "you can't". Which is terrifying. Surely some clever peeps out there can find a way round it (for normies)?
It's not that you can't at all, it's just that you'd either need to give up a lot of the functionality of a lot of sites or at least reduce the usability of many sites and your browser or configure whitelist and such for every site manually and deal with breaking changes when websites update.
-
Burn your fingerprints
wrote on last edited by [email protected].
-
You can. Libreworlf with canvas blocker, Chameleon, and a JS blocker.
Canvas blocker and a JS blocker limits a lot of what Google can see and fingerprint per page. And you'll be shocked at first how many pages have google trackers that a JS blocker kills. It's easier to turn things on one at a time than claw back data once it's out of your hands.
Chameleon spoofs a lot of other details, like browser, system time, languages, headers, etc. So for what can be seen, it's always changing and harder to corroborate. This plus moving VPN locations is what is needed.
Also, TOR does the job, but not the most fun internet experience.
wrote on last edited by [email protected].
-
I've been worried about this since Google switched to it in Feb this year.
Apparently the short answer is "you can't". Which is terrifying. Surely some clever peeps out there can find a way round it (for normies)?
wrote on last edited by [email protected].
-
You're correct. I was thinking of how I have Floorp set up.
CreepJS doesn't see NoScript as an extension and only catches me if I don't switch IPs. Time zone is also worth adjusting of one is serious.
Instead of canvas blocker, check out JShelter.
-
I've been worried about this since Google switched to it in Feb this year.
Apparently the short answer is "you can't". Which is terrifying. Surely some clever peeps out there can find a way round it (for normies)?
I was running a privacy oriented profiles on FireFox for years and kind of gave up recently.
You lose a lot of functionality and still get singled out because of some random property that is unique to your system.
-
I've been worried about this since Google switched to it in Feb this year.
Apparently the short answer is "you can't". Which is terrifying. Surely some clever peeps out there can find a way round it (for normies)?
I use Librewolf +uBlock Origin + uMatrix + tor proxy. Javascript, XHR & 3rd party anything turned off. If some sites don't work, it's doing its job.
