How to to stop browser fingerprinting and tracking?

HarborFront

Level 71
Verified
Top Poster
Content Creator
Oct 9, 2016
5,993
Apparently, canvas fingerprint blockers are not effective according to the below

How Canvas Fingerprint Blockers Make You Easily Trackable | Multilogin

The most effective way seems to have a fake consistent fingerprint and that is to use CanvasDefender extension which utilizes the below

- Make the canvas fingerprinting function available on the websites you visit. (So it’s not clear you are wearing a mask.)
- Use a canvas identity with consistency. (So it’s not clear you are trying to avoid detection.)
- Switch up the identity when necessary. (To erase your tracks.)

CanvasDefender is not a canvas fingerprint “blocker” or a “random canvas fingerprint submitter”.

In short, just change your fingerprint whenever you opens up your browser.....and browse.

Good info for read up

Study on the effectiveness of fingerprinting countermeasures - gHacks Tech News

Edit

Oooops, it seems that using CanvasDefender is equally ineffective as its original canvas fingerprint can be extracted. Test here with and without enabling CanvasDefender

Test

CanvasBlocker (for Firefox) passed the test!!

Test here as well

Bromite fingerprinting mitigations test
 
Last edited:
5

509322

A whole lot of effort for very little to no meaningful benefit. And it is extremely difficult to test the validity of browser privacy exposure tests as well as to verify browser privacy protection claims.

Just use a Linux privacy distro with a browser optimized for privacy such as Tor or JonDoFox - it's better than Windows.
 
D

Deleted member 178

A whole lot of effort for very little to no meaningful benefit. And it is extremely difficult to test the validity of browser privacy exposure tests as well as to verify browser privacy protection claims.
Yep

Just use a Linux privacy distro with a browser optimized for privacy such as Tor or JonDoFox - it's better than Windows.
+1, trying to have serious privacy on Windows is like trying to empty a breached boat with a spoon.
 

HarborFront

Level 71
Verified
Top Poster
Content Creator
Oct 9, 2016
5,993
A whole lot of effort for very little to no meaningful benefit. And it is extremely difficult to test the validity of browser privacy exposure tests as well as to verify browser privacy protection claims.

Just use a Linux privacy distro with a browser optimized for privacy such as Tor or JonDoFox - it's better than Windows.
Almost all members here use Windows OS. And that's where many learnt to harden the OS, system and browsers

If one uses Whonix + Qubes + Tor then here is not the place for him to surf
 
5

509322

Almost all members here use Windows OS. And that's where many learnt to harden the OS, system and browsers

If one uses Whonix + Qubes + Tor then here is not the place for him to surf

Privacy and anonymity are compromised on Windows. It's like putting a bandaid on a long, gaping wound.

Besides, for extremely high anonymity and privacy on Windows, it requires a lot of administration and sometimes that very precise order of steps be followed every time. Do one thing out of order and the whole protection system falls apart.
 
Last edited by a moderator:

HarborFront

Level 71
Verified
Top Poster
Content Creator
Oct 9, 2016
5,993
Privacy and anonymity are compromised on Windows. It's like putting a bandaid on a long, gaping wound.
You can apply all the tricks on the net to minimize the amount of data send to MS but MS still has ways to bypass them.

As for anonymity Windows, by default, is not designed for that. You want anonymity use Whonix with Tor

It's a price to pay in using Windows OS and you just need to live with it
 
  • Like
Reactions: oldschool
5

509322

You can apply all the tricks on the net to minimize the amount of data send to MS but MS still has ways to bypass them.

As for anonymity Windows, by default, is not designed for that. You want anonymity use Whonix with Tor

It's a price to pay in using Windows OS and you just need to live with it

People chase high-level anonymity and privacy on Windows and those efforts are a waste of time. Like my original post, very little to no meaningful benefit in exchange for a whole lot of effort.
 

Arequire

Level 29
Verified
Top Poster
Content Creator
Feb 10, 2017
1,813
Just stick Tails on a flash drive and fire it up whenever you require actual anonymity.
As for Windows, I say attempt to protect your privacy up to the point where it doesn't get in the way of your day-to-day activities.
 

HarborFront

Level 71
Verified
Top Poster
Content Creator
Oct 9, 2016
5,993
Just stick Tails on a flash drive and fire it up whenever you require actual anonymity.
As for Windows, I say attempt to protect your privacy up to the point where it doesn't get in the way of your day-to-day activities.

For Windows

Use O&O Shut Up 10 + WPD + SpyBot Anti-Beacon + disable those unneeded settings in Privacy section of Windows will be sufficient
 

LDogg

Level 33
Verified
Top Poster
Well-known
May 4, 2018
2,261
Using extensions like Privacy Possum, ScriptSafe, NoScript for Javascript API fingerprinting technique, Ghostery, uBlock Origin, Keyboard Privacy, Decentraleyes for Firefox or Chrome.

Use a VPN for regular website visiting.

For Windows OS use @HarborFront suggestion.

Sandbox or container like Comodo Firewall or Sandboxie for web browser security & privacy.

How you have to look at things is by making sure the privacy enhancements you do, don't override your daily functionality of your computer. There's much more to this too.

~LDogg
 

zzz00m

Level 6
Verified
Well-known
Jun 10, 2017
248
I am now using Canvas Defender for both FF and Chrome. I ran into incompatibilities with some websites while using CanvasBlocker and FF.

I like the setting to change canvas fingerprint every 24 hours. Each day is a new day that way! :)
 

LDogg

Level 33
Verified
Top Poster
Well-known
May 4, 2018
2,261
I am now using Canvas Defender for both FF and Chrome. I ran into incompatibilities with some websites while using CanvasBlocker and FF.

I like the setting to change canvas fingerprint every 24 hours. Each day is a new day that way! :)
There are ways around this as some websites can implement code to see your real canvas fingerprint. Try and extension like Trace or Cydec Platform Anti-Fingerprinting Platform. Or you could use NoScript to make sure a canvas element in JavaScript can't be reached.

~LDogg
 
  • Like
Reactions: oldschool

HarborFront

Level 71
Verified
Top Poster
Content Creator
Oct 9, 2016
5,993
There are ways around this as some websites can implement code to see your real canvas fingerprint. Try and extension like Trace or Cydec Platform Anti-Fingerprinting Platform. Or you could use NoScript to make sure a canvas element in JavaScript can't be reached.

~LDogg
Have you tested to see those software you mentioned which hides/randomized your canvas fingerprint do NOT expose your real fingerprint using the below test

Test

You can also test your canvas fingerprint at

Bromite fingerprinting mitigations test

Unless you want to micro manage only some sites blocking using Javascript is going to break many sites
 

LDogg

Level 33
Verified
Top Poster
Well-known
May 4, 2018
2,261
Seems to put out random readouts, haven't seen the real fingerprint yet pop up.
Client Rects could be the same. Not quite sure @HarborFront

~LDogg
 
  • Like
Reactions: oldschool

HarborFront

Level 71
Verified
Top Poster
Content Creator
Oct 9, 2016
5,993
Seems to put out random readouts, haven't seen the real fingerprint yet pop up.
Client Rects could be the same. Not quite sure @HarborFront

~LDogg
You must do this test to determine whether it exposes your real canvas fingerprint. If it shows RED then your real fingerprint is exposed if after hiding/randomizing it

Test
 
  • Like
Reactions: oldschool

Yellowing

Level 5
Verified
Jun 7, 2018
221
You must do this test to determine whether it exposes your real canvas fingerprint. If it shows RED then your real fingerprint is exposed if after hiding/randomizing it

Test
Yeah... that test goes negative even if you change your canvas fingerprint every 5 minutes, which it would if you use the Canvas Defender app that is recommended in the link that explains comprehensively how they could still track you with a totally random canvas. :unsure:
Is the test garbage? :confused:
Canvas Fingerprinting - BrowserLeaks.com shows you more information. A uniqueness of 100% would indicate a bad fingerprint protection, but if that value changes every 5 minutes to a different 100% unique value, there is no problem.
 
  • Like
Reactions: oldschool

Yellowing

Level 5
Verified
Jun 7, 2018
221
I assume it turns green if you totally block canvas fingerprinting, right? Wouldn't that in turn make you just as identifiable?
Because with CanvasDefender that fingerprint on the page changes every 5 minutes, as it should.

Edit: The second one changes and that seems to be an issue. Where does the page get the first one? A cookie?
Blocking it block the execution of the page.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top