search

kkapsner / CanvasBlocker

A Firefox extension to protect from being fingerprinted.
https://canvasblocker.kkapsner.de
Mozilla Public License 2.0
1.12k stars 84 forks source link

Feature Request: Spoof touch support API(s) #548

Open e-t-l opened 3 years ago

e-t-l commented 3 years ago

Spoof or otherwise obfuscate browser touch support fingerprint for touchscreen devices.

Description

I have a touchscreen laptop, and when I checked my browser uniqueness on coveryourtracks.eff.org, the most unique thing about my browser was the touch support. I don't see any way to spoof or disable this in Firefox's about:config, so would CanvasBlocker be able to add it as a setting? (note: would this actually be possible without breaking touchscreen functionality?)

Expected Behavior

When the setting is enabled, touch support-related fingerprinting metrics are fed common, non-unique data.

Current Behavior

Depending on the device, touch screen functionality can be highly identifiable compared to other fingerprinting metrics (for my computer, the touch support fingerprint matched 11 in 1000 devices. Comparatively, my next most identifiable metric, installed fonts, was around 45 in 1000, which is much less unique).

Steps to Reproduce (for bugs)

  1. On a touch-capable device, test the fingerprinting on your browser at https://coveryourtracks.eff.org/
  2. View your score on the Touch Support metric.
DGjone44 commented 3 years ago

You have a valid point yet only few has touch enabled laptops.

kkapsner commented 3 years ago

I have to take a look. But I think it should be doable.

Ineluki commented 2 years ago

I'd like to second this. Not only for touch enabled laptops. A regular PC I tested came out with: "Max touchpoints: 0; TouchEvent supported: false; onTouchStart supported: true" which is unique for 1 in 40000 according to coveryourtracks. Having the option to spoof this somehow or having a hint which config settings are too unique (similar to webaudio disabled) would be greatly appreciated.