this post was submitted on 07 Mar 2025
513 points (98.9% liked)

Technology

64937 readers
3988 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 11 hours ago (1 children)

short of a website provider having access to my provider ip over time vs. customer data, how is my browser fingerprint uniquely identifying me when I clear cookies every now and then and often resize the browser window? Genuinely curious - obviously between clearing cookies there's an issue, and also if I use logins to any websites that share data with some asshat like google analytics, they will recognize me across websites. And of course with the latest mozilla data grab, things will get worse :/

[–] [email protected] 5 points 10 hours ago* (last edited 10 hours ago)

Privacy focused browsers can help (but don't fully resolve). Not to redo the work of others, copy/pasta:

What makes fingerprinting a threat to online privacy? It is pretty simple. First, there is no need to ask for permissions to collect all this information. Any script running in your browser can silently build a fingerprint of your device without you even knowing about it. Second, if one attribute of your browser fingerprint is unique or if the combination of several attributes is unique, your device can be identified and tracked online. In that case, no need for a cookie with an ID in it, the fingerprint is enough.

A couple of useful articles:

https://en.wikipedia.org/wiki/Device_fingerprint

https://blog.torproject.org/browser-fingerprinting-introduction-and-challenges-ahead/ (Excerpt above)

https://onlinelibrary.wiley.com/doi/10.1155/2022/3363335

There's also a number of interviews with white and red hat hackers who delve quite deeply into the subject and how they've used this telemetry to go after black hats (mainly to emphasize that even with some degree of sophistication this can be difficult to evade, especially when compounded with other methods and telemetry already modelled against your identity).