Browser fingerprinting via F-cache(favicon cache). - Githubissues

minbrowser / min

A fast, minimal browser that protects your privacy

https://minbrowser.org/

Apache License 2.0

7.96k stars 702 forks source link

Browser fingerprinting via F-cache(favicon cache). #1536

Open prashant-btkl opened 3 years ago

prashant-btkl commented 3 years ago

Hey :wave: There is some research that abuses the F-cache table to identify a user via browser fingerprinting.

How to achieve fingerprinting?

User visits a tracker website.
User is redirected to 32 subdomains with different favicons. This favicons are stored in F-cache table.
If the favicon is stored in F-cache then it can be represented by 1 ,if not then it would be represented by 0.

This technique can be used to identify 2^32 different browser across different websites.

more information is provided in these links. white paper supercookie working

lubiedo commented 3 years ago

Hi @prashant-btkl. Have you confirmed that supercookies affect the browser? The demo wasn't able to throw any result (Min 1.20.0).