_gyhb

GitHub: https://github.com/z0ccc/extension-fingerprints

Chrome extensions can be detected by fetching their web accessible resources. These are files inside an extension that can be accessed by web pages. The detected extensions can be used to track you through browser fingerprinting.

This website scans over 1000 extensions and shows you the percentage of users that share the same extensions.

I don't think that method would work for detecting extension debugging.

Doesn't seem like this work for detecting the extension.

I'm unsure if that would work for this extension. Do you have a link to an implementation?

How can you detect it?

How can you detect it? Which websites refuse to activate their features if the debugger is active?

What if you're trying to hide your country lol? It also spoofs your locale and user agent. Just because its not something you care about doesn't mean its useless. Also never claimed it was going to change the world or anything. Just thought it was an interesting way to use the debugger api and that some people might find it cool.

Surely this is a case of commenting something that does not to be commented ?

Check out https://vytal.io/. There are many more data points then just the geolocation api.

Chrome extensions can be detected by fetching their web-accessible resources. These are files inside an extension that can be accessed by web pages.

Vytal has no web-accessible resources so it can not be detected.

Recently made this extension and interested in getting some feedback on it.

Vytal can Spoof your timezone, locale, geolocation and user agent. This data can be used to track you or reveal your location.

Most extensions that provide anti-fingerprinting features rely on content scripts to inject script tags into webpages. There are many limitations to script tag injections which you can read about here: https://palant.info/2020/12/10/how-anti-fingerprinting-exten...

Vytal utilizes the chrome.debugger API to spoof this data. This allows the data to be spoofed in frames, web workers and during the initial loading of a website. It also makes the spoofing completely undetectable.

You can test and compare Vytal and other extensions on https://vytal.io

Unfortunately it doesn't work on Firefox since Firefox doesn't support the debugger API. Works on Brave tho.