- Apr 25, 2013
- 5,355
Chameleon
Browser fingerprinting protection for everybody.
Chameleon is a Chrome privacy extension that
detects fingerprinting-like activity, and
protects against fingerprinting, currently by making Chrome look like Tor Browser.
WARNING
Chameleon is pre-alpha, developer-only software.
Please note that while Chameleon detects the use of canvas fingerprinting, Chameleon does not yet protect against it. See the coverage table below for more on Chameleon's current status.
The next step for Chameleon is to block scripts from loading based on their use of fingerprinting techniques, of which canvas fingerprinting is one. This work is in progress now (enabled by tying code execution to originating scripts in 25d7a5).
Detection
Chameleon detects font enumeration and intercepts accesses of fingerprinting-associated JavaScript objects like Window.navigator.
The number over Chameleon's button counts the number of suspected fingerprinters on the current page.
Protection
Since Tor users are supposed to all look alike, Chameleon attempts to blend in by altering request headers and JavaScript properties to match Tor Browser's values.
To start with, Chameleon covers Panopticlick's fingerprinting set, with more complete coverage in the works.
Chrome without Chameleon:
Chrome with Chameleon:
Tor Browser:
Installation
To manually load Chameleon in Chrome, check out (or download and unzip) this repository, go tochrome://extensions/ in Chrome, make sure the "Developer mode" checkbox is checked, click on "Load unpacked extension..." and select the chrome folder inside your Chameleon folder.
To update manually loaded Chameleon, update your checkout, visit chrome://extensions and click on the "Reload" link right under Chameleon's entry.
You could also generate an installable CRX package. See below for details. To install from a CRX package, drag and drop the package file onto the chrome://extensions page.
https://github.com/ghostwords/chameleon
Download:
https://github.com/ghostwords/chameleon/releases
Browser fingerprinting protection for everybody.
Chameleon is a Chrome privacy extension that
Chameleon is pre-alpha, developer-only software.
Please note that while Chameleon detects the use of canvas fingerprinting, Chameleon does not yet protect against it. See the coverage table below for more on Chameleon's current status.
The next step for Chameleon is to block scripts from loading based on their use of fingerprinting techniques, of which canvas fingerprinting is one. This work is in progress now (enabled by tying code execution to originating scripts in 25d7a5).
Detection
Chameleon detects font enumeration and intercepts accesses of fingerprinting-associated JavaScript objects like Window.navigator.
The number over Chameleon's button counts the number of suspected fingerprinters on the current page.
Protection
Since Tor users are supposed to all look alike, Chameleon attempts to blend in by altering request headers and JavaScript properties to match Tor Browser's values.
To start with, Chameleon covers Panopticlick's fingerprinting set, with more complete coverage in the works.
Chrome without Chameleon:
Chrome with Chameleon:
Tor Browser:
Installation
To manually load Chameleon in Chrome, check out (or download and unzip) this repository, go tochrome://extensions/ in Chrome, make sure the "Developer mode" checkbox is checked, click on "Load unpacked extension..." and select the chrome folder inside your Chameleon folder.
To update manually loaded Chameleon, update your checkout, visit chrome://extensions and click on the "Reload" link right under Chameleon's entry.
You could also generate an installable CRX package. See below for details. To install from a CRX package, drag and drop the package file onto the chrome://extensions page.
https://github.com/ghostwords/chameleon
Download:
https://github.com/ghostwords/chameleon/releases