Beoardielingen foar CanvasBlocker
CanvasBlocker troch kkapsner
381 beoardielingen
- Wurdearring: 5 fan 5troch kondor, 8 jierren lyn
- Wurdearring: 5 fan 5troch samyueru_beityosef_benmayumi, 8 jierren lyn
- Wurdearring: 5 fan 5troch Fleet Command, 8 jierren lynIt is great, but it'd be much better if the Mozilla Add-ons link embedded in it was language-agnostic. Currently, it is to the German version of the site.
Antwurd ûntwikkeler
8 jierren lyn pleatstThis issue will be fixed in the next version: https://github.com/kkapsner/CanvasBlocker/issues/219 - Wurdearring: 5 fan 5troch Firefox-brûker 14201700, 8 jierren lyn
- Wurdearring: 5 fan 5troch Firefox-brûker 14191840, 8 jierren lyn
- Wurdearring: 5 fan 5troch pix0wl, 8 jierren lyn
- Wurdearring: 5 fan 5troch Firefox-brûker 12654054, 8 jierren lynExcellent add-on! Thanks for your hard work!
- Wurdearring: 5 fan 5troch Firefox-brûker 14191652, 8 jierren lynVery nice works.
But it may not pass detective on test page http://101.37.204.139:8080/uapost.html.when try times test, it may enter an endless loop and Let the browser stop working.Antwurd ûntwikkeler
8 jierren lyn pleatstThis page doen't even work when no addon at all is installed... but to discuss this further please open an issue at https://github.com/kkapsner/CanvasBlocker/issues
Communication is much easier there. - Wurdearring: 5 fan 5troch zhaqenl, 8 jierren lyn
- Wurdearring: 5 fan 5troch Firefox-brûker 13202285, 8 jierren lyn
- Wurdearring: 5 fan 5troch The Beard Below My Chin, 8 jierren lynNice works.
Please note I test the audio fingerprint at https://audiofingerprint.openwpm.com/ and it causes browser slowdown.Antwurd ûntwikkeler
8 jierren lyn pleatstI know - this page is not written in a peformant way. You can test the audio fingerprint at http://kkapsner.github.io/CanvasBlocker/test/audioTest.html as well. - Wurdearring: 5 fan 5troch Firefox-brûker 14156124, 8 jierren lynNice works.
Please note it does not detect (and block) the code embedded in a url through the
"data:text/html" directive.
I don't know if this method it's exploitable in a web page
example: paste the following code on your navigation bar
(It's a dots wave single pixel plotter, so it uses getImageData and it works even if you block the readout API):
edit: sample code moved to pastebin (sorry, pasting the code here does not works):
https://pastebin.com/pFvdgKNNAntwurd ûntwikkeler
8 jierren lyn pleatstGood point. I will see if this is exploitable. But please open an issue at https://github.com/kkapsner/CanvasBlocker/issues where we can discuss the implications and findings. Also communication is much easier there. - Wurdearring: 5 fan 5troch GregDT, 8 jierren lyn
- Wurdearring: 5 fan 5troch Firefox-brûker 13835690, 8 jierren lynThank you for this extension (and for keeping it opensource). Nowadays it's getting harder and harder to get a sense of real privacy. CanvasBlocker + AdGuard for Windows + Privacy Badger + HTTPS Everywhere + custom user.js helps me feel safer on a growing data collection frenzy.
- Wurdearring: 5 fan 5troch ©®°˜, 8 jierren lyn100% unique mean that is not really natural, canvas should not be unique but changed in order to be natural.
Unique canvas fingerprints will do much worse.
Is like you said you have a device that never exist.
To better understand how this work :
Google already have a full database with all kind of canvas signatures from all worldwide devices (iphone, android, computers, etc...), and if your canvas signature will not match on them database then you fail, it is a prove that your canvas is fake. If you try to spoof the signature then image pixel parameters will not match and again you fail so is almoust imposible to pass canvas.
On default settings may make it pass the google test.
For example google will not ask for SMS confirmation when a new gmail account is created because he trust the device you use.
Most of people must understand why unique signatures is bad practice and all softwares that spoof parameters will make traking services to detect the device much easyAntwurd ûntwikkeler
8 jierren lyn pleatstPlease open an issue at https://github.com/kkapsner/CanvasBlocker/issues where we can discuss this. AMOs rating comments are too limited to have a good conversation.
One small comment on unique signatures: they are not bad by itself as long as they are not persistend (i.e. the timestamp you connect to the server is very likely to be a unique signature but it's not persistent). This is the case in the CB default settings. - Wurdearring: 5 fan 5troch Firefox-brûker 14039775, 8 jierren lyn
- Wurdearring: 5 fan 5troch Gummi, 8 jierren lynCan't seem to get version 0.4.4b working with Firefox ESR 52.7.2, there's just no icon visible anywhere on the UI.
Edit: My bad! I remember that this addon had an icon before but nowadays it hasn't. Works great!Antwurd ûntwikkeler
8 jierren lyn pleatstThis Addon does not have an icon that is always visible. Only a fingerprint icon is displayed in the adress bar when some canvas data was faked for the web page. You can test at http://kkapsner.github.io/CanvasBlocker/test/test.html
If you still think that it's not working properly try version 0.4.4a and open a new issue at https://github.com/kkapsner/CanvasBlocker/issues
EDIT: no problem. Glad that it works for you. - Wurdearring: 5 fan 5troch Firefox-brûker 13837360, 8 jierren lynKeep up the good work and thank you.
- Wurdearring: 5 fan 5troch Firefox-brûker 13870378, 8 jierren lyn
- Wurdearring: 5 fan 5troch Salsa, 8 jierren lyn
- Wurdearring: 5 fan 5troch containers-everywhere, 8 jierren lyn