EFF "cover your tracks" browser privacy test : privacy

[–] aeronmelon@lemmy.world 25 points 4 months ago (1 children)

You should include a hyperlink to the actual site in your post.

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 27 points 4 months ago

I forgot sorry! here it is: https://coveryourtracks.eff.org/

[+] downpunxx@fedia.io 23 points 4 months ago* (last edited 3 weeks ago) (3 children)

[deleted]

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 14 points 4 months ago (9 children)

very hard to circumvate fingerprinting, I use noscript for that

[–] swayevenly@lemm.ee 8 points 4 months ago (3 children)

What are your settings for noscript? This test won't complete after installing it.

[–] MigratingtoLemmy@lemmy.world 6 points 4 months ago (1 children)

You have to enable the scripts for the page and leave everything else blocked

[–] swayevenly@lemm.ee 2 points 4 months ago (1 children)

Doesn't work.

[–] MigratingtoLemmy@lemmy.world 2 points 4 months ago (1 children)

It's a bit of manual work. Trial and error with just first party scripts, then add specific capabilities to scripts one-by-one

[–] swayevenly@lemm.ee 1 points 4 months ago (2 children)

Best I get is with canvasblocker--without NoScript. At this point I'm not sure this screenshot is not photoshopped.

[–] MigratingtoLemmy@lemmy.world 2 points 4 months ago (1 children)

We could ask the OP for their NoScript settings.

@WeLoveCastingSpellz@lemmy.dbzer0.com

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 1 points 4 months ago (1 children)

in the noscriot settings default is set to "noscript and others" rest turned off, there is also ublock origin set to block 3rd party scripts, firefox fingerprinting settings are turned on

[–] MigratingtoLemmy@lemmy.world 2 points 4 months ago (2 children)

What are your NoScript settings for this page?

load more comments (2 replies)

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 1 points 4 months ago

firefoxes regular fingerprinting protection has canvas blocking try turning that on from about:config. no scrip allows only "noscript" and "others" to loaf by defsult and ublock origin is blocking 3rd psrty javascript.

[–] DarkDarkHouse@lemmy.sdf.org 2 points 4 months ago

Task failed successfully

load more comments (1 replies)

load more comments (8 replies)

[–] Hegar@kbin.social 4 points 4 months ago

I got almost the exact same result using DDG on a cheap android phone. Within .1 bits of identifying info.

load more comments (1 replies)

[+] Syl@jlai.lu 23 points 4 months ago* (last edited 1 month ago) (3 children)

[removed by mod]

[–] Artyom@lemm.ee 12 points 4 months ago (3 children)

In my experience, you have thee choices. You can use NoScript and avoid enabling domains required for fingerprinting, you can turn on privacy.resistFingerprinting in about:config, or instead of focusing on not being fingerprinted, focus on guaranteeing your fingerprint will keep changing.

[–] astreus@lemmy.ml 10 points 4 months ago (2 children)

I turned privacy.resistFingerprinting to true and now get an absolutely unique fingerprint on the tool

[–] Artyom@lemm.ee 8 points 4 months ago* (last edited 4 months ago)

That might be because it'll be new every time.

Edit: I haven't done my homework about how good this post's test is, but I use amiunique.org to compare browser settings.

[–] PumaStoleMyBluff@lemmy.world 2 points 4 months ago

Be aware that any sites using HTML5 Canvas will probably be broken now. It breaks some other niche things too that may not be obviously related, so just keep that in mind if any site starts acting up.

[–] Cryophilia@lemmy.world 5 points 4 months ago

Funny thing is, I had to enable scripts on that website in order for the test to work lol

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 3 points 4 months ago

you can o all 3 too >:3

[–] garfaagel@sh.itjust.works 12 points 4 months ago (1 children)

I use an addon called Chameleon that creates a random user agent that changes periodically.

[–] Smokeless7048@lemmy.world 5 points 4 months ago

similar, i used Random User Agent, it shows that i have a unique finger print... but the user agent of that fingerprint is not 'my' user agent, so in 30 mintutes i would appear as a different fingerprint

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 4 points 4 months ago

blocking javascript using noscript

[–] pfaca@lemm.ee 15 points 4 months ago (1 children)

I don't know if you posted a link to the actual site (I'm not seeing one, just a screenshot), https://coveryourtracks.eff.org/

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 10 points 4 months ago

ye that's the one, I forgot to put the url in the post

[–] TragicNotCute@lemmy.world 13 points 4 months ago (1 children)

Thanks for posting this! I installed privacy badger and modified my user agent as a result of the test. Very helpful insight that I didn’t have before.

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 8 points 4 months ago (1 children)

privacy badger is outdated though, not needed anymore if you have ublock origin

[–] TragicNotCute@lemmy.world 8 points 4 months ago (1 children)

I have ublock origin and failed the tracker checks without privacy badger.

load more comments (1 replies)

[–] FlashMobOfOne@lemmy.world 9 points 4 months ago (8 children)

Our tests indicate that you have strong protection against Web tracking.

IS YOUR BROWSER:

Blocking tracking ads? Yes

Blocking invisible trackers? Yes

Protecting you from fingerprinting? ◕ your browser has a randomized fingerprint

-

Feels good man.

load more comments (8 replies)

[–] brbposting@sh.itjust.works 8 points 4 months ago* (last edited 4 months ago) (1 children)

Wow nice. Any opinions on how these fingerprinting evaluators compare?

CreepJS:
https://abrahamjuliot.github.io/creepjs

EFF’s Cover Your Tracks:
https://coveryourtracks.eff.org

Am I Unique?:
https://amiunique.org

Sad a pretty stock iPhone that’s blocking via some filterlists and using iCloud Private Relay (a “VPN”) is so detectable! Should be so many browsers appearing similar but there’s always this & that that mean I’m unique.

-my comment a month back & some discussion

[–] lemann@lemmy.dbzer0.com 8 points 4 months ago

I'm completely unique, both AmIUnique and the CreepJS test highlighted my installed fonts and two webcams (one of them is actually a virtual redirect for my primary webcam, since the drivers are DirectShow-based)

Would be interesting to see how my linux laptop performs, tbf it might be unique too considering it's a mbp 2012. I remember running into at least one website I visited on it showing much higher prices compared to when I revisited the same website later from my windows desktop...

[–] dependencyinjection@discuss.tchncs.de 6 points 4 months ago (1 children)

Within our dataset of several hundred thousand visitors tested in the past 45 days, only one in 7748.22 browsers have the same fingerprint as yours.

Currently, we estimate that your browser has a fingerprint that conveys 12.92 bits of identifying information.

Using Arc on iOS.


Blocking tracking ads?	Yes
Blocking invisible trackers?	Yes
Protecting you from [fingerprinting]	Partial protection

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 3 points 4 months ago* (last edited 4 months ago) (1 children)

pretty typical, not too bad if you aren't protecting your fingerprint with the noscript addon

[–] dependencyinjection@discuss.tchncs.de 3 points 4 months ago (1 children)

Is that available on iOS?

I realise my options are limited on this platform.

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 2 points 4 months ago* (last edited 4 months ago)

noscript also exists on chromium, so if there a browser that supports addons on IOS it most prolly will have it. But I wouldn't worry about it too much. I don't have noscript installed on my phone either for convenience sake

[–] foremanguy92_@lemmy.ml 5 points 4 months ago

What are your browser config and settings? (Extensions, settings, about:config...)

[–] kinther@lemmy.world 2 points 4 months ago

I'm not sure if it's just me, but the page wouldn't load at all. I'm using pihole for network DNS blocking + privacy badger + noscript. Even when I allowed all the domains via noscript temporary trusting it just sat there and spun forever.

[–] gazoinksboe@lemmy.world 2 points 4 months ago (2 children)

Any tips for iOS users? I got mid results

load more comments (2 replies)

[–] trxxruraxvr@lemmy.world 2 points 4 months ago (1 children)

Anyone know if its possible to change the HTTP_ACCEPT header in Firefox on Android? Apparently that alone is enough to uniquely identify me :(

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 3 points 4 months ago

I use "Mull" on android it is a firefox fork and is pretty much arkenfox mobile and more. You can try switching to that

[–] powermaker450@discuss.tchncs.de 2 points 4 months ago (1 children)

somewhat related, is there any way at all to enable high refresh rates while using resistFingerprinting, or something I could use instead of it? this is the only thing keeping me away from resistFingerprinting on Mull and Librewolf.

[–] WeLoveCastingSpellz@lemmy.dbzer0.com 2 points 4 months ago

Ah so that's the reason that Mull is limited to 60 hz. Sorry I have no idea

Privacy