[linux-elitists] Browser fingerprinting

[Adam Back]

Scary numbers.  Even with chrome incognito unique to 1 in 1.7 m on linux. 
Maybe better on windows.

I wonder if no-script would help or is this passive headers only?  Seems
like the leak was fonts, plugins and user agent in that order at 1 in 128k,
266k, and 1.7m respectivey.  Need less chatty browsers.

Adam

On Mon, Oct 07, 2013 at 08:07:56AM +0200, Eugen Leitl wrote:
>----- Forwarded message from Don Marti <dmarti at zgp.org> -----
>
>Date: Sun, 6 Oct 2013 11:11:46 -0700
>From: Don Marti <dmarti at zgp.org>
>To: linux-elitists at zgp.org
>Subject: [linux-elitists] Browser fingerprinting
>Message-ID: <20131006181146.GA21225 at zea.gateway.2wire.net>
>User-Agent: Mutt/1.5.21 (2010-09-15)
>
>Corporate speak: "Tawakol and Ingis both said the
>new technology, which is still under development,
>would allow companies to use alternative approaches
>that are sometimes called statistical or probabilistic
>tracking, while remaining in compliance with industry
>privacy standards."
>
>Translation: "Fine, you smug cookie-blocking nerds.
>We're going to go all browser fingerprinting on you."
>
>  http://blog.sfgate.com/techchron/2013/10/04/ad-groups-prepare-for-cookieless-future-develop-opt-out-tool-for-alternative-tracking/
>
>Mozilla has been working on cleaning up the
>third-party cookie problem, and making a dent in it,
>as you can tell by the complaints from the creepy
>adtech business.
>
>Unfortunately, Firefox appears to be highly
>fingerprintable.
>
>https://panopticlick.eff.org/ says "Your browser
>fingerprint appears to be unique among the 3,458,043
>tested so far."
>
>Ouch.  Got to get my act together here.  But of
>course the more that I customize, the more unique my
>browser looks.
>
>Who's got a browser that comes up reasonably generic
>on Panopticlick, and what did you do?
>
>-- 
>Don Marti                      +1-510-332-1587 (mobile)
>http://zgp.org/~dmarti/        Alameda, California, USA
>dmarti at zgp.org
>_______________________________________________
>Do not Cc: anyone else on mail sent to this list.  The list server is set for maximum one recipient.
>linux-elitists mailing list
>linux-elitists at zgp.org
>http://zgp.org/cgi-bin/mailman/listinfo/linux-elitists
>
>----- End forwarded message -----
>-- 
>Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org
>______________________________________________________________
>ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org
>AC894EC5: 38A5 5F46 A4FF 59B8 336B  47EE F46E 3489 AC89 4EC5