CanvasBlocker에 대한 리뷰
CanvasBlocker 제작자: kkapsner
리뷰 388개
- 5점 만점에 5점Firefox 사용자 14307734 님, 8년 전Hello, excellent program, for when a version for the Opera browser ??????
개발자 답글
8년 전에 게시됨A version for Opera or Chrome is not planned. They do not provide the necessary APIs to provide the same quality of protection. - 5점 만점에 5점Firefox 사용자 14300424 님, 8년 전It gets the job done.
Didn't even know I need it until a web page started to abuse canvas to shove ads in your face - 5점 만점에 5점Firefox 사용자 14242164 님, 8년 전Great stuff. I think this should be a "featured extension" in the pivacy and security category.
- 5점 만점에 5점Firefox 사용자 14054127 님, 8년 전Nice, but the toolbar icon changes color sometimes (red/green). What do the different colors mean?
Green = I'm save, red = I'm not protected? And what do I have to do for it to protect me again?개발자 답글
8년 전에 게시됨The color change just indicate that something was faked. It's some sort of notification and nothing to worry about. - 5점 만점에 5점samyueru_beityosef_benmayumi 님, 8년 전
- 5점 만점에 5점Fleet Command 님, 8년 전It is great, but it'd be much better if the Mozilla Add-ons link embedded in it was language-agnostic. Currently, it is to the German version of the site.
개발자 답글
8년 전에 게시됨This issue will be fixed in the next version: https://github.com/kkapsner/CanvasBlocker/issues/219 - 5점 만점에 5점Firefox 사용자 14201700 님, 8년 전
- 5점 만점에 5점Firefox 사용자 14191840 님, 8년 전
- 5점 만점에 5점Firefox 사용자 14191652 님, 8년 전Very nice works.
But it may not pass detective on test page http://101.37.204.139:8080/uapost.html.when try times test, it may enter an endless loop and Let the browser stop working.개발자 답글
8년 전에 게시됨This page doen't even work when no addon at all is installed... but to discuss this further please open an issue at https://github.com/kkapsner/CanvasBlocker/issues
Communication is much easier there. - 5점 만점에 5점Firefox 사용자 13202285 님, 8년 전
- 5점 만점에 5점The Beard Below My Chin 님, 8년 전Nice works.
Please note I test the audio fingerprint at https://audiofingerprint.openwpm.com/ and it causes browser slowdown.개발자 답글
8년 전에 게시됨I know - this page is not written in a peformant way. You can test the audio fingerprint at http://kkapsner.github.io/CanvasBlocker/test/audioTest.html as well. - 5점 만점에 5점Firefox 사용자 14156124 님, 8년 전Nice works.
Please note it does not detect (and block) the code embedded in a url through the
"data:text/html" directive.
I don't know if this method it's exploitable in a web page
example: paste the following code on your navigation bar
(It's a dots wave single pixel plotter, so it uses getImageData and it works even if you block the readout API):
edit: sample code moved to pastebin (sorry, pasting the code here does not works):
https://pastebin.com/pFvdgKNN개발자 답글
8년 전에 게시됨Good point. I will see if this is exploitable. But please open an issue at https://github.com/kkapsner/CanvasBlocker/issues where we can discuss the implications and findings. Also communication is much easier there. - 5점 만점에 5점Firefox 사용자 13835690 님, 8년 전Thank you for this extension (and for keeping it opensource). Nowadays it's getting harder and harder to get a sense of real privacy. CanvasBlocker + AdGuard for Windows + Privacy Badger + HTTPS Everywhere + custom user.js helps me feel safer on a growing data collection frenzy.
- 100% unique mean that is not really natural, canvas should not be unique but changed in order to be natural.
Unique canvas fingerprints will do much worse.
Is like you said you have a device that never exist.
To better understand how this work :
Google already have a full database with all kind of canvas signatures from all worldwide devices (iphone, android, computers, etc...), and if your canvas signature will not match on them database then you fail, it is a prove that your canvas is fake. If you try to spoof the signature then image pixel parameters will not match and again you fail so is almoust imposible to pass canvas.
On default settings may make it pass the google test.
For example google will not ask for SMS confirmation when a new gmail account is created because he trust the device you use.
Most of people must understand why unique signatures is bad practice and all softwares that spoof parameters will make traking services to detect the device much easy개발자 답글
8년 전에 게시됨Please open an issue at https://github.com/kkapsner/CanvasBlocker/issues where we can discuss this. AMOs rating comments are too limited to have a good conversation.
One small comment on unique signatures: they are not bad by itself as long as they are not persistend (i.e. the timestamp you connect to the server is very likely to be a unique signature but it's not persistent). This is the case in the CB default settings. - 5점 만점에 5점Firefox 사용자 14039775 님, 8년 전