Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In two separate private browser windows, I was identified as unique, so does that mean a fingerprint across private browser tabs would not work?


If you have Firefox with "resist fingerprinting" enabled then you are feeding it some dummy data. People worry about the fact that this might make you "unique," but fail to grasp that if you look differently unique every time you're not necessarily identifiable.


I think its matter of "least common denominator" as in the sum of all fields will surely be unique, but what's the _minimum_ number of fields needed to isolate one user? You can download the JSON from each test and compare the diffs yourself - there's a lot of noise from "cpt" and "ratio" fields, but some that stand out are "referer" and "cookie" fields as well as a few SSL attributes. Not sure if controlling for those is all it takes to de-anonymize, but either way it's not great.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: