Hide in plain sight...

Started by JasonD, January 13, 2016, 01:18:22 PM

Previous topic - Next topic

JasonD

I usually try to keep up to date with what's going on in Academia in our industry but realised I woefully out of date at reading papers.

However this one caught my eye. It stops trying to defeat fingerprinting techniques that can be used for a myriad of reasons, but normally to identify an individual. It does this by subtly changing key environment variables as well as the data returned on how JS renders parts of the DOM etc.

http://www.securitee.org/files/privaricator_www2015.pdf

http://research.microsoft.com/apps/pubs/default.aspx?id=209989

littleman

This is a great idea.  It looks like they are using a dedicated browser, but I could see this being a very popular extension to FF/Chrome.

ergophobe

In the subject to this video
https://vimeo.com/95366100
The say: "In other words, because the user's fingerprint is unique every time, the user's actions cannot be linked across browsing sessions."

So I guess it doesn't do anything within a session, which is why they close the window every time.

I expect there will be PriVaricator browser extensions before too long.

BTW... My mother always told me I was unique. Now I have proof.

https://amiunique.org

I did not know of the Panoptoclick tool they mention in the article:
https://panopticlick.eff.org

bill

Quote from: ergophobe on January 13, 2016, 06:08:04 PM
BTW... My mother always told me I was unique. Now I have proof.

https://amiunique.org

I did not know of the Panoptoclick tool they mention in the article:
https://panopticlick.eff.org

I question the results of that Am I Unique? site. I have a few VMs that are certainly not unique according to Panoptoclick, but I get the same results from Am I Unique?. It can't detect the OS correctly. It thinks I'm using Win7 when I am using Linux and BDS variants. They also have a fairly small sample base to get their statistics from.