EFForg/cover-your-tracks

More ways of fingerprinting

Opened this issue · 4 comments

1 performance of js engine (see papers by mowery and shacham) and gpu rendering (http://arxiv.org/pdf/1503.01408)
2 enabled ciphersuites
3 speech synthesis engines #8 #9
4 webaudio devices list #12
5 endianess #11
6 canvas text measuring API (in the published on github version of fingerprinter I rounded the measurement to integer to store it in typed array, but I shouldn't have done that, and now I can't reverse that because it would change the fingerprints, but when implement you should preserve fraction part)

https://developer.mozilla.org/en-US/docs/Web/API/Battery_Status_API seems like it could be useful as well. Mozdev says it's obsolete so I'm not sure if there is a better api, but even determining which version of this api is implemented seems like it should give you more of a fingerprint.

Why was it closed?

Spring cleaning. I can reopen but no promises as to when I'll get to it.

  1. attempting to make requests to http versions of websites known to use HSTS, but not HSTS preloading
    (can also be used to create supercookies, but I assume supercookies are out of scope for this project)