disconnectme / disconnect-tracking-protection

Canonical repository for the Disconnect services file
Other
648 stars 221 forks source link

Consider adding Aufp as fingerprinter #192

Closed ghost closed 1 year ago

ghost commented 4 years ago

You can find it for example on the arstechnica.com and other websites as well. It has been identified as fingerprinter by Privacy Possum ( https://github.com/cowlicks/privacypossum )

Captura de Pantalla 2020-06-30 a la(s) 09 23 54

Asides from being identified by Privacy Possum as fingerprinter, the name of the script is already suspicious https://aufp.io/api/v1/fp ( the "fp" at the end and in the name of the tracker itself ). So I decided to see its code to confirm if it was or not fingerprinting me

Captura de Pantalla 2020-06-30 a la(s) 09 24 15

and then there is the last bit of code

Captura de Pantalla 2020-06-30 a la(s) 09 29 04

It is quite clear by now that this is a fingerprinter tracker