search

joue-quroi / canvas-fingerprint-blocker

Block HTML canvas element from being used for fingerprinting purposes
http://add0n.com/canvas-fingerprint-blocker.html
63 stars 13 forks source link

fails EFF fingerprinting test #9

Open dschneiderch opened 3 years ago

dschneiderch commented 3 years ago

Using this with Edge and it fails the fingerprinting test at https://coveryourtracks.eff.org/

Are there additional known fingerprinting mechanisms that are not covered by this extension and are being used by EFF?

I also have ublock origin and decentraleyes extensions installed.

BillAnt1 commented 10 months ago

Yes, most websites use multiple fingerprinting methods and parameters, such as canvas, fonts, audio, WebGL, etc. While Canvas Blocker is a great blocker, if you want better protection and also pass the CoverYourTracks.EFF.org test, you may want to install Fingerprint Spoofing extension from the Chrome store (ID# ljdekjlhpjggcjblfgpijbkmpihjfkni). Once installed, pin it to the top menu, left click on the greenish icon, and select all the blocking options by ticking the check-boxes, except for TimeZone. The time zone is best left un-spoofed to prevent issues with some websites. . You can use Canvas Blocker along with Fingerprint Spoofing, or by itself. To use it together, make sure to uncheck the "Canvas" option in Fingerprint Spoofing along with the TimeZone. To use Fingerprint Spoofing all by itself, make sure to turn on the "Canvas" setting, and turn off or uninstall Canvas Blocker. . I would recommend running a test using both extensions at the same time, then one at a time, to see which method works best. Here's a great way to test how well you're protected from fingerprinting. . Open a private/incognito window in Chrome (press Ctrl+Shift+N) Go to fingerprint.com Scroll down to "See Fingerprint in action ... Your Visitor ID" Remember the last 3 digits of the Visitor ID Exit by closing down all Chrome windows, very important to clear the session! Open a new private/incognito window in Chrome. Go to fingerprint.com Scroll down to "See Fingerprint in action ... YOUR VISITOR ID" Compare the last 3 digits with the previous Visitor ID. If they are different, then you're well protected, otherwise you're not. In order to get a new unique fingerprint/Visitor ID, you MUST use a private/incognito window in Chrome, and close down all open windows to clear the session (very important!). In some cases you also need to grab a new IP between tests to get a new unique fingerprint/Visitor ID.