Google Chrome Extension Detects "Zero-Width Character" Fingerprinting Attacks


Level 23
Malware Hunter
Jan 8, 2017
Software developer Marco Chiappetta has built a Google Chrome extension that can detect attempts to fingerprint text using the "zero-width character" technique.
The extension, named "Replace zero-width characters with emojis" is available on the official Google Chrome Web Store and on GitHub.
Zero-width characters can be used for fingerprinting
Chiappetta built the extension after reading an article penned by British security researcher Tom Ross. In his piece, Ross detailed how organizations could use zero-width characters to fingerprint sensitive text that a user might be tempted to copy-paste in an unauthorized document or another web page.
Chrome extension replaces zero-width characters with emojis
Ross published his proof-of-concept code to raise awareness to this type of attacks. Whistleblowers should take particular care.
"Depending on your line of work, it could be vitally important to understand the risks associated with copying text," Ross says. "Very little applications will try to render the zero-width characters."
Detecting such attacks usually involves using Linux command-line utilities, something that's above the skill level of most non-technical users. But this is where Chiappetta came in and created a Chrome extension that replaces zero-width characters with random emojis.


Staff member
Malware Hunter
Jul 27, 2015
Good question @L0ckJaw . Check on reviews/support questions/answers not only in the webstore and how frequent it gets updates etc. A homepage with a email address or contactform is also important as a correct linked privacy policy.

Personal I would pass on this for now as it's a bit too new and placed under the Humor category. :sleep:
Last edited:
  • Like
Reactions: L0ckJaw