sereneblue / chameleon

WebExtension port of Random Agent Spoofer
https://sereneblue.github.io/chameleon
GNU General Public License v3.0
518 stars 53 forks source link

is the "fontHack" screen detection method still relevant in chameleon? #44

Closed WPFilmmaker closed 6 years ago

WPFilmmaker commented 6 years ago

First of all thanks again for your dedication on the project! (3 of my feature requested closed in a few hours, wow!).

This is could be a question more than a feature request as I don't know what's the status of the issue.

It was originally reported on the bug tracker of random-agent-spoofer (here: https://github.com/dillbyrne/random-agent-spoofer/issues/104) in 2014. As the original developer never closed the issue, it made me wonder whether the issue is still present in chameleon. If yes it would be great having it fixed.

The original comment from Lizatoj is: "I found a bug - the spoofing of the window size is not working. version from github: 0.9.4.3 Firefox: 31.3 esr How to test: Set a random window size in RAM Check if that works here: ip-check.info (really good free site to check your privacy) Result: Window size cannot be set by RAM"

dillbyrne 's answer: "Hello lizatoj Thanks for your bug report and your support. I am aware of this issue. Currently RAS spoofs the screen size by presenting spoofed javascript values to the site which then queries them and takes the spoofed results as if they are the real values. It used to work on that site in the past.

What is happening now in the case of this site is that it uses a "fontHack" to get the screen size and not the spoofed javascript values we are presenting . I am still looking for a way to block or spoof the "fontHack". I have not had a chance to properly look into it because I have been so busy but I plan to. If you happen to know a way to defeat it please let me know and I will add it."

Is chameleon immune to this?

sereneblue commented 6 years ago

I'm not sure what the font hack is, but I tested Chameleon with http://ip-check.info/ and it reports the spoofed screen size. Feel free to reopen the issue if the results are different for you.

For some strange reason, it seems that the site is incorrectly detecting the window.name property. It states it's traceable, although it's empty.