Hacker News Reader

Hacker News

Comment by alcide | Hacker News Reader

Parent Full thread

alcide

Orion Browser (Kagi Product) prevents fingerprinters from running by default.

https://help.kagi.com/orion/privacy-and-security/preventing-...

View on HN

Orion browser is also capable of running uBlock Origin (not Lite) on iOS.

How do they reliably detect fingerprinting? Did they solve the Halting Problem? Sounds fishy.

>The only efficient protection against fingerprinting is what Orion is doing — preventing any fingerprinter from running in the first place. Orion is the only browser on the market that comes with full first-party and third-party ad and tracking script blocking, built-in by default, making sure invasive fingerprinters never run on the page.

sounds like they block "known" fingerprinting scripts and call it a day.

This makes you inherently trackable, ironically. No trace is a massive trackable attribute, since almost nobody is untraceable.

Hey look it's that invisible guy again!

> Orion is the only browser on the market that comes with full first-party and third-party ad and tracking script blocking

I love Kagi, but that is a laughable statement. Brave has been offering ad and fingerprint blocking for years now. The reason why they don't have full first party blocking ("aggressive" mode blocking) on by default is because it tends to break things.

This is also covered in the article. I appreciated the analogy they used: You can put on a ski mask when you go to the mall, and it will conceal your identity, but you will also be instantly suspicious to everyone around you, and will likely be asked to leave most of the stores you try to visit.

This is only because there are only 0.001% of people using anonymizers. If you are a minority with specific requirements, you are shown the door almost in any case, not only on the Internet.

To ask the obvious question: Doesn't blocking fingerprinters itself fingerprint the browser.

(Also, what is a 'fingerprinter'? Isn't it something that runs server-side, out of reach of the browser, based on data collected?)

No it's usually a javascript script that does weird things like drawing strings on an invisible canvas and sends it back to the server. I'm wondering if a browser extension that intercepts those payloads and randomizes them with other people's payloads is what's called for here.

Reply on news.ycombinator.com