How to to stop browser fingerprinting and tracking?

[HarborFront]

Apparently, canvas fingerprint blockers are not effective according to the below

How Canvas Fingerprint Blockers Make You Easily Trackable | Multilogin

The most effective way seems to have a fake consistent fingerprint and that is to use CanvasDefender extension which utilizes the below

- Make the canvas fingerprinting function available on the websites you visit. (So it’s not clear you are wearing a mask.)
- Use a canvas identity with consistency. (So it’s not clear you are trying to avoid detection.)
- Switch up the identity when necessary. (To erase your tracks.)

CanvasDefender is not a canvas fingerprint “blocker” or a “random canvas fingerprint submitter”.

In short, just change your fingerprint whenever you opens up your browser.....and browse.

Good info for read up

Study on the effectiveness of fingerprinting countermeasures - gHacks Tech News

Edit

Oooops, it seems that using CanvasDefender is equally ineffective as its original canvas fingerprint can be extracted. Test here with and without enabling CanvasDefender

Test

CanvasBlocker (for Firefox) passed the test!!

Test here as well

Bromite fingerprinting mitigations test

 

[509322]

A whole lot of effort for very little to no meaningful benefit. And it is extremely difficult to test the validity of browser privacy exposure tests as well as to verify browser privacy protection claims.

Just use a Linux privacy distro with a browser optimized for privacy such as Tor or JonDoFox - it's better than Windows.

 

[Deleted member 178]

A whole lot of effort for very little to no meaningful benefit. And it is extremely difficult to test the validity of browser privacy exposure tests as well as to verify browser privacy protection claims.

Yep

Just use a Linux privacy distro with a browser optimized for privacy such as Tor or JonDoFox - it's better than Windows.

+1, trying to have serious privacy on Windows is like trying to empty a breached boat with a spoon.

 

[HarborFront]

A whole lot of effort for very little to no meaningful benefit. And it is extremely difficult to test the validity of browser privacy exposure tests as well as to verify browser privacy protection claims.

Just use a Linux privacy distro with a browser optimized for privacy such as Tor or JonDoFox - it's better than Windows.

Almost all members here use Windows OS. And that's where many learnt to harden the OS, system and browsers

If one uses Whonix + Qubes + Tor then here is not the place for him to surf

 

[509322]

Almost all members here use Windows OS. And that's where many learnt to harden the OS, system and browsers

If one uses Whonix + Qubes + Tor then here is not the place for him to surf

Privacy and anonymity are compromised on Windows. It's like putting a bandaid on a long, gaping wound.

Besides, for extremely high anonymity and privacy on Windows, it requires a lot of administration and sometimes that very precise order of steps be followed every time. Do one thing out of order and the whole protection system falls apart.

 

[HarborFront]

Privacy and anonymity are compromised on Windows. It's like putting a bandaid on a long, gaping wound.

You can apply all the tricks on the net to minimize the amount of data send to MS but MS still has ways to bypass them.

As for anonymity Windows, by default, is not designed for that. You want anonymity use Whonix with Tor

It's a price to pay in using Windows OS and you just need to live with it

 

[509322]

You can apply all the tricks on the net to minimize the amount of data send to MS but MS still has ways to bypass them.

As for anonymity Windows, by default, is not designed for that. You want anonymity use Whonix with Tor

It's a price to pay in using Windows OS and you just need to live with it

People chase high-level anonymity and privacy on Windows and those efforts are a waste of time. Like my original post, very little to no meaningful benefit in exchange for a whole lot of effort.

 

[HarborFront]

People chase high-level anonymity and privacy on Windows and those efforts are a waste of time. Like my original post, very little to no meaningful benefit in exchange for a whole lot of effort.

Maybe better privacy but not anonymity. Like I mentioned Windows OS is not designed for anonymity

 

[Arequire]

Just stick Tails on a flash drive and fire it up whenever you require actual anonymity.
As for Windows, I say attempt to protect your privacy up to the point where it doesn't get in the way of your day-to-day activities.

 

[HarborFront]

Just stick Tails on a flash drive and fire it up whenever you require actual anonymity.
As for Windows, I say attempt to protect your privacy up to the point where it doesn't get in the way of your day-to-day activities.

For Windows

Use O&O Shut Up 10 + WPD + SpyBot Anti-Beacon + disable those unneeded settings in Privacy section of Windows will be sufficient

 

[LDogg]

Using extensions like Privacy Possum, ScriptSafe, NoScript for Javascript API fingerprinting technique, Ghostery, uBlock Origin, Keyboard Privacy, Decentraleyes for Firefox or Chrome.

Use a VPN for regular website visiting.

For Windows OS use @HarborFront suggestion.

Sandbox or container like Comodo Firewall or Sandboxie for web browser security & privacy.

How you have to look at things is by making sure the privacy enhancements you do, don't override your daily functionality of your computer. There's much more to this too.

~LDogg

 

[zzz00m]

I am now using Canvas Defender for both FF and Chrome. I ran into incompatibilities with some websites while using CanvasBlocker and FF.

I like the setting to change canvas fingerprint every 24 hours. Each day is a new day that way!

 

[LDogg]

I am now using Canvas Defender for both FF and Chrome. I ran into incompatibilities with some websites while using CanvasBlocker and FF.

I like the setting to change canvas fingerprint every 24 hours. Each day is a new day that way!

There are ways around this as some websites can implement code to see your real canvas fingerprint. Try and extension like Trace or Cydec Platform Anti-Fingerprinting Platform. Or you could use NoScript to make sure a canvas element in JavaScript can't be reached.

~LDogg

 

[HarborFront]

There are ways around this as some websites can implement code to see your real canvas fingerprint. Try and extension like Trace or Cydec Platform Anti-Fingerprinting Platform. Or you could use NoScript to make sure a canvas element in JavaScript can't be reached.

~LDogg

Have you tested to see those software you mentioned which hides/randomized your canvas fingerprint do NOT expose your real fingerprint using the below test

Test

You can also test your canvas fingerprint at

Bromite fingerprinting mitigations test

Unless you want to micro manage only some sites blocking using Javascript is going to break many sites

 

[LDogg]

Seems to put out random readouts, haven't seen the real fingerprint yet pop up.
Client Rects could be the same. Not quite sure @HarborFront

~LDogg

 

[HarborFront]

Seems to put out random readouts, haven't seen the real fingerprint yet pop up.
Client Rects could be the same. Not quite sure @HarborFront

~LDogg

You must do this test to determine whether it exposes your real canvas fingerprint. If it shows RED then your real fingerprint is exposed if after hiding/randomizing it

Test

 

[zzz00m]

How Canvas Fingerprint Blockers Make You Easily Trackable | Multilogin

 

[Yellowing]

You must do this test to determine whether it exposes your real canvas fingerprint. If it shows RED then your real fingerprint is exposed if after hiding/randomizing it

Test

How Canvas Fingerprint Blockers Make You Easily Trackable | Multilogin

Yeah... that test goes negative even if you change your canvas fingerprint every 5 minutes, which it would if you use the Canvas Defender app that is recommended in the link that explains comprehensively how they could still track you with a totally random canvas.
Is the test garbage?
Canvas Fingerprinting - BrowserLeaks.com shows you more information. A uniqueness of 100% would indicate a bad fingerprint protection, but if that value changes every 5 minutes to a different 100% unique value, there is no problem.

 

[LDogg]

You must do this test to determine whether it exposes your real canvas fingerprint. If it shows RED then your real fingerprint is exposed if after hiding/randomizing it

Test

Both on FF Quantum & Opera it turned green. Setup looks to be spot on both browsers! @HarborFront

~LDogg

 

[Yellowing]

I assume it turns green if you totally block canvas fingerprinting, right? Wouldn't that in turn make you just as identifiable?
Because with CanvasDefender that fingerprint on the page changes every 5 minutes, as it should.

Edit: The second one changes and that seems to be an issue. Where does the page get the first one? A cookie?
Blocking it block the execution of the page.