Browser fingerprinting using only CSS

marapuru 4 years ago |

This is awful, especially knowing it will be used to identify people that want to stay anonymous. But I'm glad this got published for awareness.

By not loading CSS by default, you can probably block this identification behavior. Haven't tested it though.

capableweb 4 years ago | |

I'm glad things like Tor Browser exists, seems to mostly defeat most (if not all) of the properties listed on the site.

mekster 4 years ago |

Can you really stop tracking in a realistic way?

Etag tracking also sounds hard to defend.

no_time 4 years ago | |

If you know what contributes to your fingerprint you can make create a new fingerprint for every session. This may result in decreased functionality.

webmobdev 4 years ago |

Sigh. Hope uBlock Origin will start blocking these kind of CSS trackers too.

no_time 4 years ago | |

Blocking the tracker is a fingerprintable action by itself.

NmAmDa 4 years ago | | |

Unless many people do that.

no_time 4 years ago | | |

I don't see that ever becoming a reality unless apple and mozilla join forces to enforce anti-fingerprinting standards at the cost of crippling website features, at least in private browsing mode. The other 2 players in the browser space have vested interest in keeping everything the way it is now.

webmobdev 4 years ago | | |

If uBlock Origin deploys it, and makes it a default, it will be automatically enabled for 5+ million users on Firefox.

solidr53 4 years ago |

Scary stuff, but is that enough information to fingerprint someone?

I’m thinking hundreds or thousands of iPhone 13 on the same IP thru a GSM network. How will you know?

Won’t you need battery status and all that other bits also

bilalnpe 4 years ago | |

Yes, this alone probably won't lead to unique user. This would be just another data point to narrow down the probable users.