underrobyn / AbsoluteDoubleTrace

A web extension to block browser fingerprinting (Manifest V2)
https://absolutedouble.co.uk/trace/
Other
343 stars 48 forks source link

What's about maths fingerprinting? #61

Open ptruser opened 4 years ago

ptruser commented 4 years ago

I found set of maths function which can detect reals user browser: It's works like a just compare of result with constants, specific for JS-engine's.

hypot(5.860847362277284e+38, 5.860847362277284e+38)
log10(Math.PI)
log10(Math.SQRT2)
pow(0.123, -100)
pow(Math.PI, -100)
pow(Math.E, -100)
pow(Math.LN2, -100)
pow(Math.LN10, -100)
pow(Math.LOG2E, -100)
pow(Math.LOG10E, -100)
pow(Math.SQRT1_2, -100)
pow(Math.SQRT2, -100)

I haven't research about that. But I want to know if this will be fixed and how I could help with this?

underrobyn commented 4 years ago

Hi,

I'm aware of this as a possible vector for browser fingerprinting however at this time I cannot do much research into the subject as I'm quite busy. I will leave this issue open as a reminder for later.

Thanks