dslreports logo
Search similar:


uniqs
456

camper
just visiting this planet
Premium Member
join:2010-03-21
Bethel, CT

camper

Premium Member

Now sites can fingerprint you online even when you use multiple browsers

 
»arstechnica.com/security ··· rowsers/


Researchers have recently developed the first reliable technique for websites to track visitors even when they use two or more different browsers. This shatters a key defense against sites that identify visitors based on the digital fingerprint their browsers leave behind....

Until now, however, the tracking has been limited to a single browser. This constraint made it infeasible to tie, say, the fingerprint left behind by a Firefox browser to the fingerprint from a Chrome or Edge installation running on the same machine. The new technique—outlined in a research paper titled (Cross-)Browser Fingerprinting via OS and Hardware Level Features—not only works across multiple browsers, it's also more accurate than previous single-browser fingerprinting....
voxframe
join:2010-08-02

voxframe

Member

You would think there would be an easy way to block your browser from having direct access to the system attributes that this system looks for.

IE - Do not give access to the system fonts, or 3D rendering info etc.

I assume this will obviously break lots of stuff?
Or is it as simple as killing off and kind of JAVA/Flash?

Cartel
Intel inside Your sensitive data outside
Premium Member
join:2006-09-13
Chilliwack, BC

Cartel to camper

Premium Member

to camper
changing zoom level or screen resolution gives a different hash every time.
a2320c4924aa5a54cf082d9e2e6ba7ca
e2090804f869bb4c79d5c4830849afe4
c151e1dfa3a5f50ee04a01c7a5cbaacb
db326bdef8e9a6a3e1d0d8188dab750a
a805a6e95341e98241fce81c614e0658

so does
canvas.poisondata;true

Snowy
"LET'S GO DARWIN"
Premium Member
join:2003-04-05
Kailua, HI

Snowy to camper

Premium Member

to camper
Since browser attributes already are in use as front line security checks I suppose this particular type of tracking could also be used as a security check for online logins.
If you consistently login to a site with the same browser footprint a login attempt from an unfamiliar browser could be used as a trigger for an extended validation login.

camper
just visiting this planet
Premium Member
join:2010-03-21
Bethel, CT

camper

Premium Member

 
Yup. The validation aspect was mentioned in the article. I notice it in practice as well, when I bounce between using Linux and Windows systems. The sites that are more sensitive to security (e.g., bank, brokerage) notice much more frequently when I switch.