Browser fingerprinting using only CSS

csstracking.dev

64 points·willemlabu··11 comments

This is awful, especially knowing it will be used to identify people that want to stay anonymous. But I'm glad this got published for awareness.

By not loading CSS by default, you can probably block this identification behavior. Haven't tested it though.

I'm glad things like Tor Browser exists, seems to mostly defeat most (if not all) of the properties listed on the site.

Can you really stop tracking in a realistic way?

Etag tracking also sounds hard to defend.

If you know what contributes to your fingerprint you can make create a new fingerprint for every session. This may result in decreased functionality.

Sigh. Hope uBlock Origin will start blocking these kind of CSS trackers too.

Blocking the tracker is a fingerprintable action by itself.

Unless many people do that.

I don't see that ever becoming a reality unless apple and mozilla join forces to enforce anti-fingerprinting standards at the cost of crippling website features, at least in private browsing mode. The other 2 players in the browser space have vested interest in keeping everything the way it is now.

If uBlock Origin deploys it, and makes it a default, it will be automatically enabled for 5+ million users on Firefox.

Scary stuff, but is that enough information to fingerprint someone?

I’m thinking hundreds or thousands of iPhone 13 on the same IP thru a GSM network. How will you know?

Won’t you need battery status and all that other bits also

Yes, this alone probably won't lead to unique user. This would be just another data point to narrow down the probable users.

Reply on news.ycombinator.com