Browser Fingerprinting: Stalking With a Personal Touch
summary
Browsers can be fingerprinted well enough to follow users across sites and even between browsers without cookies, combining dozens of leaks like canvas hashes, WebGL GPU traces, fonts, plugins, localStorage and timing to create a stable ID; EFF Panopticlick is an example and research claims global uniqueness drops from about 80 to 30 unique fingerprints on average after mitigations. Techniques shown include canvas fingerprinting, AudioContext and CSS tricks; defenses used are Tor letterboxing, Brave/Safari heuristics and proposals like privacy budgets.
AI-written summary · about
chapters (8)
- 0:00Start
- 2:09How browsers work
- 4:27Definitions A (simplified) comparison
- 5:21Definitions Panopticlick
- 6:35Why is this a problem?
- 7:13Use-cases Illegitimate
- 11:28Solving the issue Privacy Budgets
- 12:39Future work
related talks
24mTales From the Trenches: Fingerprints on the Web
21mFp-Scanner: The Privacy Implications of Browser Fingerprint Inconsistencies
52mBreaking Fraud and Bot Detection Solutions
40mAn Analysis of the Fingerprinting-Scripts and their Actors on the Internet
35mStealthy fingerprinting users with personalized blocking rules
35mBreaking fraud & bot detection solutions
37mFraud prevention in the age of online privacy
15mDouble-Edged Shield: On the Fingerprintability of Customized Ad Blockers