Unique fingerprint due to 3-year-old bug in Firefox
reddit.com
reddit.com
Just a quick trivial check of my local preferences and those "exposed" on the site show stuff either missing or not as per my tweaks.
In other words, this is exposing what the version of firefox you're running is.
Try it yourself.
(click "Test me" then "show full results"
Hopefully we can try and vastly reduce the leakage from navigator.plugins, but that might be hard to do without breaking the web, sadly.
In my case, for example, it says that roughly 1 in 6 browsers (of those tested by them, I suppose) have JS disabled as I do, so I don't stand out too much. However, my user agent string is 1 out of 100 and HTTP accept headers are unique among all 140k browsers they tested, apparently due to the unusual language preference settings I once made.
https://addons.mozilla.org/en-US/firefox/addon/no-resource-u...
Bugzilla report https://bugzilla.mozilla.org/show_bug.cgi?id=863246
panopticlick is still able to fingerprint me to the point where I'm unique.... over 17 bits of identity in my browser (means you can identify me in a pool of up to 2^17th people).
Try it yourself.
(click "Test me" then "show full results")
6 bits from my screen resolution. Another 2 from browser plugin details. 5 from my Http_accept headers. 5 from system fonts. It's an iPad. Every single iPad is going to match on every one of those variables. You don't get to just add them up and say "Yep, 100 bits of info, I can uniquely identify this device!"
Similarly, the 10 bits of WebGL fingerprint and 7 of canvas fingerprint might narrow it down to a single model of iPad, but I doubt the "extra bits" of the canvas fingerprint tell you anything that the WebGL fingerprint didn't already.
Having said that, I tested it with Firefox and found some unused plugins that I either removed (Google Talk) or set to never activate (Picasa - couldn't find how to remove it from Googling, Firefox or the Picasa app).
> Information from resource:// is leaked, including the fact that I'm using Firefox, the platform, the browser's language (not just the content of the Accept-Language header), and whether or not I was using Tor Browser Bundle.