Even in incognito mode, on my machine Chrome puts out enough unique info identify it across 4 million other users. You can test your browser here:
How well does Tor do with panopticlick?
How well does Tor do with panopticlick?
Also, Panopticlick hasn't been updated with some possible distinguishing measurements that have been identified since it was created. In that sense it was always meant as a lower bound on uniqueness, and should still be understood that way.
That said, browser fingerprinting is very hard to fight, and it's a lot easier to come up with new fingerprinting techniques than it is to mitigate them. So I expect that determined fingerprinters have the edge in this arms race.
Update: Tor Browser in Tails 1.2 with javascript disabled returns a fingerprint that's shared by 1 in 2,615 with 11.35 bits of identifying information.
>Within our dataset of several million visitors, only one in 4,955 browsers have the same fingerprint as yours.
>Currently, we estimate that your browser has a fingerprint that conveys 12.27 bits of identifying information.
I figured it would be more unique due to my running Tor Browser on a Mac - but I don't see how the math works out. Unless it actually has a count of machines with information identical to mine?
If your fingerprint is totally unique (like mine, with 22.16 bits of information) then it is shared by only 1 in 4,697,672 browsers in their dataset.
How else would it work (not assuming even distribution)? Im sure its a hash counter.
Currently, we estimate that your browser has a fingerprint that conveys at least 22.16 bits of identifying information.
Well, shit. I'm a snowflake.