On Librewolf i got 16.48 bits of information, on TOR browser 10.32 bits, but on Tails I managed to get only 9.3 bits.
What is the lowest score you have achieved on EFF Cover Your Tracks?
On Librewolf i got 16.48 bits of information, on TOR browser 10.32 bits, but on Tails I managed to get only 9.3 bits.
66 Comments
Kidplayer_666@lemm.ee · 55 pts · 1y
I’m unique :) this ain’t great
kusivittula@sopuli.xyz · 21 pts · 1y
its ok if your fingerprint changes on every browser startup
Boomkop3@reddthat.com · 7 pts · 1y
...as long as you are blocking tracking cookies, and aren't on a session with a website that's tracking you.
Otherwise, you just have a nice unique hash in your cookies. A password manager could help here.
broken_chatbot@lemmy.world · 2 pts · 1y
A password manager? Could you explain why?
Boomkop3@reddthat.com · 1 pts · 1y
Cookies and other ways of keeping a session upright are kept by the browser. So unless you're mad enough to copy cookies between devices, they prove you're on the same device.
Using a password every time you log in, and letting your browser wipe everything on shutdown does not show websites wether you're on yhe same or another device.
madargon@is-a.cat · 1 pts · 1y
@Boomkop3 @broken_chatbot Do you mean not keeping browser history actually makes big difference? I do that for few years but wasn't sure how much it really helped.
Boomkop3@reddthat.com · 1 pts · 1y
That does not matter, cookies and other local web storage can though
madargon@is-a.cat · 0 pts · 1y
@Boomkop3 I mean full erase on shutdown, like in private window.
Viri4thus@feddit.org · 54 pts · 1y
If you have canvas randomisation turned on (firefox) you'll always be unique but also not traceable between sessions.
fmstrat@lemmy.nowsci.com · 11 pts · 1y
Yup, canvas is heavily weighted in this test based on the results.
ipkpjersi@lemmy.ml · 4 pts · 1y
How do you turn on canvas randomisation in Firefox? I can't seem to find anything about it.
Muehe@lemmy.ml · 3 pts · 1y
I found this in about:config, defaults to true apparently:
privacy.resistFingerprinting.randomDataOnCanvasExtractBut you have to enable
privacy.resistFingerprintingfor it to work first. I enabled that and now the EFF test says "randomized" for the hashes but also Lemmy went from dark to light theme somehow.perfectly_boiled_pizza@lemmy.world · 2 pts · 1y
privacy.resistFingerprinting breaks a lot more than just themes. Many of the weird problems reported in Firefox (and forks) are just from enabling it.
It has some pros but also TONNES of cons. Everything from a completely blank page to wrong timestamps to poor textures and so much more. Sometimes you will be flagged as a bot and prompted with literally infinite puzzles, thus effectively banning you from a website.
Some of these problems get fixed but new ones also get born. I personally use it but I also expect breakage and worse performance.
Muehe@lemmy.ml · 1 pts · 1y
Well if anything breaks I suspect my add/script blockers first and in like 9/10 cases that's correct. Had turned fingerprinting resistance on since making that comment three weeks ago, and so far I didn't run into any problems beyond theming. Although I admittedly only frequent a small set of websites.
ExcessShiv@lemmy.dbzer0.com · 24 pts · 1y
With browser settings that actually let me use the internet in a way that's not overly cumbersome and annoying, I get 16bits or something and a "nearly unique fingerprint"
themoonisacheese@sh.itjust.works · 9 pts · 1y
Block any and all ads, then it doesn't matter that they have your data if they can't make money off of it (they still will do that by creating data aggregates but you can't control that)
akkajdh999@programming.dev · 18 pts · 1y
yonder@sh.itjust.works · 7 pts · 1y
Same result here. I'm using Gnome-web, which is already pretty niche, so that probably really lowers my score.
dwindling7373@feddit.it · 17 pts · 1y
Am I wrong to assume trying to blend in is a worse and contradictory strategy than trying to actively protect yourself from tracking?
If you want to not be unique, use default setting chrome without adblock. Your browser will look just like anybody else's, but they will literally know who you are.
On the opposite side of the spectrum, you lock everything down and spike as a very special browser and... that's all they know.
toastal@lemmy.ml · 21 pts · 1y
Privacy vs. anonymity
underwire212@lemm.ee · 3 pts · 1y
Right. The question is whether they can attach what they know to an identity. Depends on your threat model which goal you need to achieve.
dwindling7373@feddit.it · 2 pts · 1y
Not what I meant: https://github.com/arkenfox/user.js/wiki/3.3-Overrides-%5BTo-RFP-or-Not%5D#-fingerprinting
"If you do nothing on desktop, you are already uniquely identifiable - screen, window and font metrics alone are probably enough - add timezone name, preferred languages, and several dozen other metrics and it is game over. Here is a link to the results of a study done in 2016 showing a 99.24% unique hit rate (and that is excluding IP addresses).
Changing a few prefs from default is not going to make you "more unique" - there is no such thing."
Basically making yourself less unique is impossible so there's no sensible tradeoff to be made (other than in the context of Tor and Mullvad Browser).
ivn@jlai.lu · 12 pts · 1y
But then they can know a lot more since they don't even need to drop a cookie to track you. But that's a different threat model.
muhyb@programming.dev · 11 pts · 1y
Despite having strong protection according to these results, I always get unique fingerprinting from them. Which is scary.
Edit: Now I tried Tor on my desktop and got:
AA5B@lemmy.world · 10 pts · 1y
12.67 from Safari/iPhone, without changing any settings. This is my most commonly used browser
mac@lemm.ee · 10 pts · 1y
Huh mullvad browser got me the lowest overall. 10.44 bits and a non-unique fingerprint.
Compared against:
I do a vast majority of my browsing on my phone, unfortunately. Vanadium scored the best (on mobile), but it not having extensions (dark reader is a must) and the navigation bar not being movable to the bottom of the screen keeps me on Mull.
I don't love using mullvad for day to day browsing as I can't whitelist specific cookies to retain. Don't love having to re 2fa daily.
bdonvr@thelemmy.club · 10 pts · 1y
:(
kekmacska@lemmy.zip · 6 pts · 1y
16.47 on Cromite. But most of the identify information is not even true, almost everything is spoofed. User agent, timezone, operating system, browser name, screen size and color depth, device, even the battery percentage
SpatchyIsOnline@lemmy.world · 1 pts · 1y
Does this spoofing change with every page you visit? If so that's really neat!
kekmacska@lemmy.zip · 1 pts · 1y
screen size, color depth, battery percentage does
CubbyTustard@reddthat.com · 5 pts · 1y
ivn@jlai.lu · 4 pts · 1y
A VPN is unrelated, it changes your IP but the IP is not used to fingerprint.
CubbyTustard@reddthat.com · 1 pts · 1y
ivn@jlai.lu · 1 pts · 1y
It might have a side effect but it's still unrelated and useless for the purpose at hand.
CubbyTustard@reddthat.com · 1 pts · 1y
ivn@jlai.lu · 1 pts · 1y
That's side effects, the difference is irrelevant anyway.
I insist because I think it's important to understand this, both for you and for people reading these comments. The whole point of fingerprinting is to be able to track users without relying on cookies or IP. Changing IP does not protect against fingerprinting. I don't want people to be mislead by your comment and think they are going to avoid tracking by just taking a better VPN.
You can read more here:
https://coveryourtracks.eff.org/about#browser-fingerprinting
And you can check the source code to see there is no mention of IP address:
https://github.com/EFForg/cover-your-tracks/blob/master/fingerprint/fingerprint_helper.py
CubbyTustard@reddthat.com · 1 pts · 1y
ivn@jlai.lu · 1 pts · 1y
It's not worthless but it's on only an indication, an example.
Isn't the score change similar to the one you have when toggling Apple safebrowsing? (whatever that is)
A probable explanation is that your VPN client is somehow changing some of your browser settings. The VPN client, not the VPN itself.
Just check the detailed results to see what's changed between the two. Whatever it is it could be changed manually, it's does not require a VPN to change. But you probably don't want to change it because your score with a VPN is worse than without.
But this has nothing to do with a VPN being the best or the worse.
LastoftheDinosaurs@walledgarden.xyz · 5 pts · 1y
Doesn't look good. How do you make it so that your browser doesn't have a fingerprint at all?
InternetCitizen2@lemmy.world · 16 pts · 1y
You can't not have a finger print. You can a best try and look like everyone elses.Sadly the free market won't care and as such you won't blend with normal users. Still you can try and look like ever one else in the privacy community
catloaf@lemm.ee · 5 pts · 1y
Close it.
tyler@programming.dev · 5 pts · 1y
How does tails get the bits so low?
ivn@jlai.lu · 2 pts · 1y
Tails uses the Tor Browser which does a lot to minimize fingerprinting, for example by letterboxing so the screen size (one of the most unique information in my case) is rounded as to not be as unique.
https://tb-manual.torproject.org/anti-fingerprinting/
Pika@sh.itjust.works · 5 pts · 1y
well shoot my mobile failed that test lmao
piracysails@lemm.ee · 6 pts · 1y
I got 17,49 as well!
CrabAndBroom@lemmy.ml · 6 pts · 1y
I got exactly that number too, but also when I looked at the detailed results section lots of it was incorrect. It got that I was on some sort of Linux and using some sort of FF variant, but things like time zone, plugins, screen resolution and system fonts were all wrong.
So sending out 17.49 bits of largely identifying bullshit is still okay I think lol.
piracysails@lemm.ee · 3 pts · 1y
Could it be that the browser shares false information on purpose?
ipkpjersi@lemmy.ml · 4 pts · 1y
I got 17.5 on my Desktop Firefox lol
LittleBobbyTables@lemmy.sdf.org · 4 pts · 1y
I get 8.44 bits (1 in 347.34 browsers). I use Firefox with Arkenfox user.js applied on top, with some of my own custom overrides.
However, I think the biggest factor could be because I have Ublock Origin set to medium-hard mode (block 1st party scripts, 3rd party scripts and 3rd party iframes by default on all websites), so the lack of JavaScript heavily affects what non-whitelisted websites can track. I did whitelist 1st-party scripts on the main domain for this test (coveryourtracks.eff.org), but all the 'tracker' site redirects stay off the whitelist.
I actually had to allow Ublock Origin to temporarily visit the tracker sites for the test to properly finish--otherwise it gives me a big warning that I'm about to visit a domain on the filter list.
Gerudo@lemm.ee · 4 pts · 1y
I appreciate the site, but what score is considered good or bad? A cool stat would be some kind of score compared to everyone else.
douglasg14b@lemmy.world · 4 pts · 1y
Default Google Chrome embedded on Android with nothing configured and googled up.
17 bits.
Albbi@lemmy.ca · 4 pts · 1y
I misread the title as "Cover your taxes" and got really excited to earn about tax avoidance tips. Legal ones obviously.
LambdaRX@sh.itjust.works · 3 pts · 1y
After disabling extension "I still don't care about cookies" on Librewolf, I went from 17.48 bits unique fingerprint to 16.48 nearly unique one.
eleitl@lemm.ee · 3 pts · 1y
Vanadium: Your Results Within our dataset of several hundred thousand visitors tested in the past 45 days, only one in 61101.0 browsers have the same fingerprint as yours.
Currently, we estimate that your browser has a fingerprint that conveys 15.9 bits of identifying information.
myrrh@ttrpg.network · 3 pts · 1y
LambdaRX@sh.itjust.works · 4 pts · 1y
They probably give entropy value, average number of, yes or no, questions that are needed to identify You. (Guess all the information that your browser provided)
Boomkop3@reddthat.com · 3 pts · 1y
Interesting, this is a cool test! Unsurprisingly, my setup is rather unique.
One thing that stood out to me is that it failed to detect my adblocker. Also, my screen size alone is unique: 1 in 181697 of this 181697 browsers tested.
OhVenus_Baby@lemmy.ml · 3 pts · 1y
Best methods to lower the score on android? I tested multiple browsers on EFF. 17 bits regardless of browser.
JustVik@lemmy.ml · 2 pts · 1y
It constantly gives me 17.5 bits on several browsers firefox, nyxt, gnu icecat, librewolf...
LambdaRX@sh.itjust.works · 2 pts · 1y
Number of bits can also depend on your UI scaling, resolution and timezone.
DuckBilledMongoose@lemmings.world · 2 pts · 1y
What would be considered a high score on this? Is 16 too high?
DieserTypMatthias@lemmy.ml · 2 pts · 1y
17.47 on mobile Vivaldi.
Zerush@lemmy.ml · 2 pts · 1y
With Vivaldi
OmegaLemmy@discuss.online · 1 pts · 1y
Didn't know Vivaldi had this capability, I just used it because it was the only decent browser with an on/off sidebar till zen
Zerush@lemmy.ml · 1 pts · 1y
Not only the sidebar, you can tweak almost everything to your like.
ripley@lemmy.world · 1 pts · 1y
It seems like the characteristics of my Android tablet doom me here - I was unique even using Chrome.
Melody@lemmy.one · 1 pts · 1y
13
whyNotSquirrel@sh.itjust.works · 1 pts · 1y
If I tried twice and I got a unique id both times, does it mean Firefox is covering my track ?
astropenguin5@lemmy.world · 1 pts · 1y
Idk, but I have the same. Scrolling through the tracking methods the only ones with high uniqueness were hash of canvas fingerprint and hash of webGL for me. According to it I still have strong protection Firefox + ublock on mobile though
kusivittula@sopuli.xyz · 1 pts · 1y
if it ran the test again, I'd say yes. but if it just reloads the result page, doesn't mean anything
whyNotSquirrel@sh.itjust.works · 1 pts · 1y
yeah I was wondering if the tool would show that hit saws this id once already