A comprehensive study of how fingerprintable users are

_factor

I wonder if this took into account GPU render-time fingerprinting? The minute timing differences in how you render an image are still used to identify you.

ape4

I read they're not releasing the details - that seems good (for the public). Hopefully they're releasing it to privacy-friendly browser makers.

NooneAtAll5

funny how enabling letterboxing causes me to be in "under 100 samples" category btw, is pixelRatio controllable somehow? how do I set it to 1, most common value?

vova_hn2

I understand that the HN crowd is composed of many different people with radically different interests and opinions, so an "average HN opinion" would be mostly meaningless, but still... I find it mildly amusing that HN both loudly complains about bots scraping their websites AND is very interested in user privacy. The conflicting part is that user privacy automatically means that you cede any control over how exactly does the user accesses your resource. Whether they use a web browser or an automated scraper. Any attempt to analyze requests to tie different requests made by the same actor together automatically means privacy violation. I don't have a good answer to this dilemma yet, I just thought that this is a curious observation and wanted to share.

solarmist

Oh, damn. I thought this was about the uniqueness of human fingerprints or similar.

gausswho

Ran their fingerprinting test. CSS Colours SelectedItem and SelectedItemText was the only problematic one, and uniquely identified me to less than 0.0054 of Linux users. Why?

dt3ft

> Your browser is not comparable to the dataset, so we have avoided showing you inaccurate results. Yup. Because I use my own browser. Built from scratch with exception of V8, Stylo html5ever, and a few other bits and bobs. A fresh new rendering engine in Rust and all. Not a fork of any existing engine. Native support for uBlock Origin filter lists and custom filters. It scores above ~20 in speedometer as of today and covers WPT about 89%. Will be publishing it soon as permissive open source.

M95D

> Protections that ship have to keep the web working I don't agree. I activated most of the protections. If a site breaks, then I don't get to see it. That's OK. No big loss. Users should fight their FOMO.

usern20260720

why can't my browser curl download an .html package, as a word processor would download a .doc file, instead of betraying my privacy by publishing even my underwear size?

jbm

I don't understand. I'm using a standard ios browser with no changes. When it checked my screen resolution, it claimed it was 0.0016% of the browser population. This is a standard iphone running safari; how is that possible?