Chameleon - Spoof your browser profile

Kongo

Level 36
Thread author
Verified
Top Poster
Well-known
Feb 25, 2017
2,524

What is Chameleon?​


Chameleon is a Mozilla Firefox addon that spoofs your browser profile and includes a few privacy enhancing options. It is the spiritual successor to the popular addon Random Agent Spoofer.

Website: Chameleon

I personally do not think much of User-Agent-Spoofing or Fingerprint-spoofing with the use of extensions but this one has quite a few additional features for the people that want to check it out.

@HarborFront already made a thread for this extension but it's quite old and not open for further replies. As the extension is receiving updates regularly I thought I'd mention it once again.
 
F

ForgottenSeer 92963

Website: Chameleon

I personally do not think much of User-Agent-Spoofing or Fingerprint-spoofing with the use of extensions

What I have understood spoofing has to be consistent (e.g. language, time zone, geo location) and spoofing has to be within real life data boundaries (e.g. browser and OS or OS, hardware and videocard details*) and some spoofed data can impact functionality (e.g. accepts, screen size and CSS) and some data is duplicated or retrievable from different sources (e.g. user agent, navigator and browser API's).

This seems rather complex to do well, so I fully agree with your remark that it is highly unlikely a simple extension can do this this right. When an extension seems to have taken all variances into consideration (e.g. Cydec anti-FP), I highly doubt an average user knows how to configure a profile correctly .


* It is highly unlikely a 2 or 4 GB RAM configuration and hardware concurrency of 2 or 4 is used with the latest and most powerful gaming graphics card on an OS which does not has the proper driver for that GPU-beast yet
 
Last edited by a moderator:

HarborFront

Level 71
Verified
Top Poster
Content Creator
Oct 9, 2016
6,042
You can install it and test its various features to see if they are effective. If any feature found ineffective, you can disable it and use another extension

Too bad it doesn't have many fingerprint protections like Scriptsafe, Trace etc
 
F

ForgottenSeer 92963

You can install it and test its various features to see if they are effective. If any feature found ineffective, you can disable it and use another extension

Too bad it doesn't have many fingerprint protections like Scriptsafe, Trace etc
You are missing the Achilles Heel of these pseudo and half baked privacy protections : the data can be retrieved from several sources and has to be spoofed consistently in a real world context. You have to hide in the crowd, not stand out with non existing and inconsistent values. My guess is that in 99% of the cases, you are not improving your privacy, but painting a huge, glow in the dark, tag mark on your forehead.
 
Last edited by a moderator:

HarborFront

Level 71
Verified
Top Poster
Content Creator
Oct 9, 2016
6,042
You are missing the Achilles Heel of these pseudo and half baked privacy protections : the data can be retrieved from several sources and has to be spoofed consistently in a real world context. You have to hide in the crowd, not stand out with non existing and inconsistent values. My guess is that in 99% of the cases, you are not improving your privacy, but painting a huge, glow in the dark, tag mark on your forehead.
Ok so I'm Arnold Schwarzenegger The Commando.......... very outstanding.

What do you want to do with me?
 

oldschool

Level 82
Verified
Top Poster
Well-known
Mar 29, 2018
7,153
You are missing the Achilles Heel of these pseudo and half baked privacy protections : the data can be retrieved from several sources and has to be spoofed consistently in a real world context. You have to hide in the crowd, not stand out with non existing and inconsistent values. My guess is that in 99% of the cases, you are not improving your privacy, but painting a huge, glow in the dark, tag mark on your forehead.
Indeed, all of these protections are best when built into the browser itself like Brave or FF.
 

plat

Level 29
Top Poster
Sep 13, 2018
1,793
Indeed, all of these protections are best when built into the browser itself like Brave or FF.
And enabled by default so that hopefully most of the herd is wearing them. Otherwise, you're just increasing your online presence and your footprint with doubtful benefits in return. It's like wearing the same clothes as everyone else, except you're also wearing sparkly ear-rings or something.

Trace user here. I can still be machine ID'd on this website (MalwareTips). This was my opinion somewhere else and it hasn't changed much. :D

 
F

ForgottenSeer 92963

@plat1098

Same situation here. My Asus mobo is so old, it even has a special device for Sata II (the dreaded Marvel 9128) and after replacing a first generation (4 core) intel i7 with a (6 core) Xeon X5675 it is easy to track me with an 'unclassified' CPU

Resistance is futile ....

:)
 
Last edited by a moderator:

HarborFront

Level 71
Verified
Top Poster
Content Creator
Oct 9, 2016
6,042
And enabled by default so that hopefully most of the herd is wearing them. Otherwise, you're just increasing your online presence and your footprint with doubtful benefits in return. It's like wearing the same clothes as everyone else, except you're also wearing sparkly ear-rings or something.

Trace user here. I can still be machine ID'd on this website (MalwareTips). This was my opinion somewhere else and it hasn't changed much. :D

TRACE cannot protect against all forms of fingerprints neither can any single extension.
 
Last edited:
  • Like
Reactions: Nevi and oldschool
F

ForgottenSeer 92963

I (think I) have an idea which values should be faked or added noise to, but when there are so many data points to track, chance of being identified with optimal protection still exist. This is because people more or less behave the same when LOOKING, SELECTING, DECIDING and BUYING stuff.

With privacy lists (AG+EL) and AdGuard's URL protection, you tackle most used tracking mechanisms and with paid Cydec Anti Fingerprinting you can fake/blur all other known data points used to track you.
 
Last edited by a moderator:
  • Like
Reactions: oldschool and Nevi

Allego

Level 2
Verified
Jan 25, 2016
97
I used to install this kind of extension in my browser and realized it doesn't work or is not worth it. Currently, I'm using the latest version of Firefox with default settings in a Virtual Machine.
 
  • Like
Reactions: oldschool

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top