Amidst the glossy marketing for VPN services, it can be tempting to believe that the moment you flick on the VPN connection you can browse the internet with full privacy. Unfortunately this is quite far from the truth, as interacting with internet services like websites leaves a significant fingerprint. In a study by [RTINGS.com] this browser fingerprinting was investigated in detail, showing just how easy it is to uniquely identify a visitor across the 83 laptops used in the study.

As summarized in the related video (also embedded below), the start of the study involved the Am I Unique? website which provides you with an overview of your browser fingerprint. With over 4.5 million fingerprints in their database as of writing, even using Edge on Windows 10 marks you as unique, which is telling.

all 100 comments

sorted by: hot top controversial new old
[–] 32 points 11 months ago (1 child)

Does anyone know if Firefox's claimed Anti fingerprinting technology is any good?

  • source
  • hideshow 1 child comment
  • [–] 32 points 11 months ago (5 children)

    I'm not looking to be anonymous, I want access to Stargate Atlantis that Amazon Prime is geo blocking from me.

    For that, VPN works as advertised.

  • source
  • hideshow 5 child comments
  • [–] 2 points 11 months ago (3 children)

    Why go through the trouble? fmhy.net

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 11 months ago (2 children)

    I hope you're not raw dogging torrenting Linux ISOs with some form of protection.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 22 points 11 months ago (1 child)

    Pfft, I have 12 firewalls, good luck decrypting these. 🤓

  • source
  • hideshow 1 child comment
  • [–] 43 points 11 months ago (16 children)

    It's always kind of funny when the Technology folks wade into well-researched and well-worn Privacy territory.

    Do you want to not wave a giant flag of your activity to Google, Meta, MS, and your ISP when you do literally anything online? Either use a VPN and Mullvad (or Librewolf, but YMMV) browser, OR a VPN and Tor OR Tor with an https bridge if paying for a VPN will make you a target (Tor bridges are not for casuals, save them for those in genuine need).

    VPN locations need to be changed. Frequently. Router level VPN at home becomes your "This is me" location, then make use of VPNs on each device when you want an extra layer of obfuscation.

    There's not a lot of middle ground at this point, and it's not difficult.

  • source
  • hideshow 16 child comments
  • [–] 9 points 11 months ago* (last edited 11 months ago) (9 children)

    Does that mean my ISP can still detect if I'm going to websites they don't approve of if I'm using Mullvad as my VPN but using Firefox as my browser?

  • source
  • parent
  • hideshow 9 child comments
  • [–] 20 points 11 months ago* (2 children)

    No, with a VPN the only thing your ISP sees is you connecting to a VPN server IP.

    But browser finger printing, on the other hand, can identify you to every website you visit, due to info your browser hands over to every website... Such as OS version, Resolution, installed Plugins, browser settings, geolocation info, etc..which is often unique enough to identify you out of the whole of the internet.

    Ironically, locking your browser down with more security features/settings/plugins often makes you more identifiable. Cause capitalism is god damned sure they are gonna track you and monetize the hell out of your information, whether its via your name, your user name, or just your digital fingerprint.

    https://coveryourtracks.eff.org/

  • source
  • parent
  • hideshow 2 child comments
  • [–] 16 points 11 months ago (2 children)

    Your ISP can’t tell who you are contacting if you are using a VPN, but websites will track you by other means.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 11 months ago (1 child)

    Ok, cool. It was mainly my ISP I was worried about.

    Would be useful for me to find a browser that obfuscated fingerprinting efforts too though.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 11 months ago

    If you use addons like Ublock-origin. You can reduce the fingerprinting. You can also disable 3rd party iframes, disable Javascript which can further reduce the data being sent to websites.

  • source
  • parent
  • [–] 4 points 11 months ago (1 child)

    Not your ISP. Google likely is the one following that. If you have uBlock Origin installed, click on the badge on any site and you'll see which trackers there are. For Lemmy, it's just going to list other lemmy instances. When you're on that forbidden site, see if they have any Google analytics trackers - those are what will fingerprint you.

    Then go to amiunique.org or hidemytracks.eff.org and see what information you're giving up. Vanilla FF gives up fonts, sound card info, and graphics info, which are enough to pin you to specific hardware. If your machine isn't extremely common, then Google knows it's you.

    Why not download the Mullvad browser? It's free, and you're paying for its development if you're paying for the VPN.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 8 points 11 months ago (3 children)

    Router level VPN at home becomes your "This is me" location

    You and a thousand other people.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 15 points 11 months ago (2 children)

    Yeah, but fingerprinting is effective by cross referencing.

    There are 1,000 people with the IP 1.2.3.4

    There are 500 people with the IP 1.2.3.4 using Firefox

    There are 25 people with the IP 1.2.3.4 using Firefox with a 1440p screen

    There are 2 people with the IP 1.2.3.4 using Firefox with the dark reader extension with a 1440p screen at 75Hz

    etc.

    So rotating the IP can screw with that.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 11 months ago (1 child)

    Can they still not tell the screen's size if you never fullsize your window? I 'member that advice from back in the day using Tor.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 11 months ago (1 child)

    You also need to change the devices browsers, extensions and timezones to stay anonymous or buy a device and set the most common fingerprint settings, so it is harder for those companies to track you down. It is a slippery slope, and you can check your browser fingerprint and avoid adding unique settings, extensions or anything that can help them to track you.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 58 points 11 months ago (6 children)

    If the NSA wants you, they will get you. But I can hide from most of you with just a little email relay and a VPN

  • source
  • hideshow 6 child comments
  • [+] 28 points 11 months ago (6 children)
  • [–] 8 points 11 months ago (1 child)

    Heeeeey. Former kid, current adult, and future crazy old man here. Quick question. Do they still have 1 box of communal porn in the woods? Every woods had one when I was a kid, but I haven't been in the woods ever since we had to kill that bear.

    Just wondering if woods porn is still a thing.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 11 months ago (2 children)

    The woods are where i can find people though

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (-1 replies)
  • load more comments (-1 replies)
    [–] 78 points 11 months ago (8 children)

    The only real advantage you gain is being able to watch things outside your region. Without lots of work, you’re pretty easily traceable on the modern internet.

  • source
  • hideshow 8 child comments
  • [–] 35 points 11 months ago (3 children)

    I remember in 1996 my neighbor was in one of these fancy new things on the internet called a "chat room".

    He got into an arguement with someone. It got heated. Until the other guy threatened to show up at my neighbors house.

    My neighbor scoffed and laughed.

    Then the guy put in my neighbors real address. To this day, that still scares me. And back then internet crime wasn't taken seriously. In fact doxxing back then may not yet have even been a crime.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 14 points 11 months ago (1 child)

    FYI:

    https://www.thefire.org/research-learn/doxxing-free-speech-and-first-amendment

    In the US, "doxxing" laws are pretty much state-by-state and many may be violating the first amendment.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 11 months ago

    Today, yes. In 1996 "doxxing" wasn't a term. The internet was so new to people that nobody knew what it could even do.

    I'll give you a great example. I remember watching a news report fall of 2000, where K*B Toys was trying this untested idea. Could they use the internet to sell things? The experts said no, and that the internet was a fad. It simply wasn't a medium you could use for commercial things......ebay aside.

    In 1996 Google didn't even exist yet. I don't think Amazon was even a bookstore yet. The internet in those days was primitive, and the wild west of the technology realm.

  • source
  • parent
  • [–] 2 points 11 months ago

    Those were the days where if you knew someone's real name and town that they lived, you could just go and get the telephone directory for that area (the library had all of them) and look up their address and phone number. It would have to be quite a big town before you found multiple people with the same name.

  • source
  • parent
  • [–] 12 points 11 months ago* (1 child)

    Most vendors are not going to trace you like that. They can, but it’s actually kind of nontrivial and not “easy.”

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 11 months ago

    I’m more thinking about government. I gave up on trying to avoid ad tracking forever ago. But if you think a VPN keeps you safe posting “anonymously”, it doesn’t. That’s more what I’m referring to.

  • source
  • parent
  • [–] 25 points 11 months ago (2 children)

    here is a fingerprinting test you can trust https://coveryourtracks.eff.org/

    fingerprinting is nasty, i suggest canvas blocker extension because it gives them fake readouts

  • source
  • hideshow 2 child comments
  • [–] 31 points 11 months ago (1 child)

    This is why you use a separate browser for different activities and don't cross contaminate.

  • source
  • hideshow 1 child comment
  • [–] 10 points 11 months ago (2 children)

    Every time I use that site it says I am unique. So is that good? Surely if I was trackable, it would match me against the previous times I'd been there.

    Or maybe the site is just spouting a load of clickbaity nonsense?

  • source
  • hideshow 2 child comments
  • [–] 9 points 11 months ago*

    Until someone invents real-life Intrusion Countermeasure Electronics from the cyberpunk genre, where doing shit you dont like leads them to have their equipment destroyed with electricity surge, nothing you do online is private nor is there any consequences from them enumerating everything about you to sell or use maliciously.

  • source
  • [–] 23 points 11 months ago (17 children)

    Good luck I'm behind 7 proxies

  • source
  • hideshow 17 child comments
  • [–] 4 points 11 months ago (14 children)

    I’m here with multi-hop VPN with the first two hops staying in-country and the rest all random + a shit load of DNS blocking lists and browser extensions + blocking Google. I use different VPN providers too. I’m also introducing variable delays to my traffic to make NetFilter data less helpful.

  • source
  • parent
  • hideshow 14 child comments
  • [–] 11 points 11 months ago (6 children)

    Please understand that browser extensions make you more easy to track. I used to be under the same assumption, but uBO is as far as you should go. fingerprints include your extensions.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 4 points 11 months ago (1 child)

    That depends on whether your browser exposes them, and if/how they affect your fingerprint. If you go to deviceinfo.me it will show you what your browser is exposing.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 11 months ago (3 children)

    My thinking is that most of the fingerprinting is happening by third parties, and where it’s the website operators themselves I’m not super concerned about being fingerprinted.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 11 months ago (2 children)

    Look at the uBO trackers on each site and you'll br surprised how often Google comes up.

  • source
  • parent
  • hideshow 2 child comments
  • [+] 9 points 11 months ago (7 children)
  • [–] 2 points 11 months ago (5 children)

    Some privacy browsers will randomize your fingerprint

  • source
  • parent
  • hideshow 5 child comments
  • [+] 2 points 11 months ago (5 children)
  • [–] 1 point 11 months ago (4 children)
  • [–] 1 point 11 months ago (3 children)

    I imagine it’s somewhere between what both of you are saying.

    I imagine “randomized” means a random common “fingerprint” (with parameters like user agent, language, etc) rather than just a unique set of randomized parameters (say, time zone in US but language set to Farsi which would be unique to an extent).

  • source
  • parent
  • hideshow 3 child comments
  • [–] -1 points 11 months ago* (2 children)

    I mean it doesn't matter if it's unique or not. What matters is that your fingerprint changes as you browse.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 11 months ago* (1 child)

    Sorry but that’s totally wrong.

    The entire point is that if it’s unique it can be considered a fingerprint — in fact the entire reason it’s called “fingerprint” is that in theory it’s unique like a real fingerprint.

    If it’s common then it’s unreliable as a fingerprint because it’s no longer unique. Therefore whether it’s unique or not is the entire point and relevant to the topic.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 11 months ago

    Sorry, but that's totally wrong.

    Imagine if you changed your literal fingerprint. No one would be able to trace it back to you.

    Likewise, if your fingerprint changes as you browse, those activities can no longer be linked together, because you no longer have a "fingerprint" at all.

  • source
  • parent
  • load more comments (-1 replies)
  • [–] 1 point 11 months ago

    Right, that’s why I mentioned all the blocking at the DNS and browser extension level — most fingerprinting is being done by third-parties — I generally don’t see first parties fingerprinting but if they do it’s likely a website I chose to be on rather than some shady <script> from God knows where.

  • source
  • parent
  • load more comments (-1 replies)
  • [–] 0 points 11 months ago

    That's the point. It doesn't matter how many middle layers there are, if you're using a web browser, there are hundreds of pieces of information that can still be used to uniquely identify you. Do you have WebGL enabled? If so, you could be identified with 100 constantly changing proxies.

  • source
  • parent
  • [–] 16 points 11 months ago (3 children)

    I bought a used laptop from a yard sale and only use public Wi-Fi and never use the laptop for anything with my name on it.

  • source
  • hideshow 3 child comments
  • [–] 38 points 11 months ago (2 children)

    Pfft amateur, I break into my local Applbee’s after 2AM and use their POS terminal browser to look at used cars.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 28 points 11 months ago (1 child)

    Applebee's at 2AM which leaves a physical trail? Noob. I strap meshtastic nodes on wild dogs, using them as a Internet relay at 1-2kb a second, to look at manga leaks.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 11 months ago

    I randomly separate by data packages & encode that data into the DNA of various insects & such critters that then burrow down to the tier 1 and tier 2 internets & are trained to transmit that data.

    A separate group is standing by at different locations to collect the data & report back to me the results of me signing into my Google account with my full name & billing address as well as the results of by image search for "naked boobs".

    There is a bit of ping, but the bandwidth can be scaled nicely.

  • source
  • parent
  • [–] 21 points 11 months ago (9 children)

    Librewolf + uBlock Origin + Privacy Badger + containerise

    For the comedy extra point, a user agent switcher can actively lie about your browser & OS.

  • source
  • hideshow 9 child comments
  • [–] 23 points 11 months ago* (5 children)

    Using a browser like Librewolf is, itself a unique identifier bc not enough people are using it.

    EFF has a tool that lets you check your “uniqueness” and bc I used a lesser known browser, it was easier to track me.

    Not that I mean you shouldn’t use it. I just wanted to clarify that it doesn’t make you safe from ads. :(

  • source
  • parent
  • hideshow 5 child comments
  • [–] 25 points 11 months ago (4 children)

    https://coveryourtracks.eff.org/ is the EFF tool.

    My results say that I have strong protections against tracking, and that my browser is unique. It's as good as I can get.

    The agent switcher also tells the world my Librewolf on Linux is Chrome on Windows.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 11 points 11 months ago (2 children)

    Isn't it a bad thing to be unique in this context? If my browser is 1 in a million, that means that a tracker can pick me out of a lineup of a million users, no? That's why a captcha can verify you as human simply by checking a box, because it can identify your unique browser as associated with human activity.

    If I'm not mistaken, we want the opposite. We want our browsers to be as generic as possible if we don't want to be tracked.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 11 months ago (1 child)

    I would think unique means you appear as a never before seen individual and not one they can identify from their fingerprint history. If you fingerprint twice and both are unique, you are secure.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 11 months ago

    This somehow assumes that your fingerprint is going to vary, and be unique, every time you interact with a tracker. That's basically not ever going to be the case for casual use.

    If Cloudflare fails the tick-box Captcha and I need to tell it what squares contain motorcycles, that would suggest that I currently have a unique fingerprint that they do not have yet enough history on to tie to a person. How often do you get to do the square puzzle nowadays?

  • source
  • parent
  • [–] 5 points 11 months ago

    It should be noted that user agent switchers may break some website functionalities. I guess this is true for nearly all privacy protections, though this is the only one that gave me any noticeable trouble.

  • source
  • parent
  • load more comments (1 reply)
    [–] 4 points 11 months ago* (last edited 11 months ago) (2 children)

    For me I like to prevent fingerprinting by:
    Librewolf(private and less intrusive defaults) + noscript (blocking useless JavaScript) + jsshelter (Javascript sanitization) + Ublock Origin(blocking trackers and ads)

  • source
  • hideshow 2 child comments
  • [–] 6 points 11 months ago (1 child)

    Your fingerpeint is that you aren't fingerprinted. If you think a website is like "Gosh darn it those rapscallions foiled me again! Guess I can't track them now!" You're sorely mistaken. Get a user agent switcher and pretend to be a windows, chrome user to blend in with the rest of the masses.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 8 points 11 months ago

    What a pointless article.

  • source
  • [–] 5 points 11 months ago (7 children)

    Does anonymous mode browsing+VPN improve this? I would think it would

  • source
  • hideshow 7 child comments
  • [–] 25 points 11 months ago* (1 child)

    Part of the reason Tor is good is because it generates the same fingerprint for all users (part of the reason you shouldn’t install additional extensions on it, by the way). Mullvad browser tries to do this but without the Tor network.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 24 points 11 months ago (3 children)

    You can't hide or get rid of the browser fingerprint, but some addons can help to randomize it so it looks like you're using a different device every time you visit a site.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 13 points 11 months ago (1 child)

    Personally, I don’t care if a site can fingerprint me. As long as they can’t tie that fingerprint to a rich data set.

    So I make sure that each domain gets a different fingerprint response. That means that a site can validate that I’m still the same user, but any XSS attempting fingerprint based data exchange just gets garbage.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 8 points 11 months ago

    Some, but only if you're using a very common device (i.e. Dell Latitude) with Windows. Browser fingerprinting gives up hardware specs, so hiding by blending in only works when your hardware is hard to pin down.

    Use a browser that hides hardware specs, like Mullvad or Libreworlf. Even Brave is ok.

  • source
  • parent
  • 35 comments in c/privacy@lemmy.ml view that post
    8 comments in c/privacy@programming.dev view that post
    2 comments in c/privacy@lemmy.ca view that post