Fingerprints are the new cookies(royfish.dev)
694 points by royfish | 333 comments
Interactive post demonstrating browser fingerprinting by assigning a persistent nickname derived from audio, GPU, WebGL, canvas, time zone and hardware signals.
#browser-fingerprinting on Hacker News
15 stories tagged browser-fingerprinting, newest first.
AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint(blog.laserphile.com)
984 points by emctech | 317 comments
Blog post investigating how the AliExpress homepage uses silent WebAudio fingerprinting that keeps multipoint Bluetooth headphones locked to the PC, cutting off phone audio.
Since Chromium 148, Math.tanh is now fingerprintable to link underlying OS(scrapfly.dev)
374 points by joahnn_s | 174 comments
Scrapfly engineering blog post explaining how OS-specific libm rounding in Math.tanh, CSS trig, and Web Audio lets anti-bot systems fingerprint a browser's host OS.
Cloudflare Turnstile requiring fingerprintable WebGL(hacktivis.me)
759 points by HypnoticOcelot | 441 comments
Blog post complaining that Cloudflare Turnstile loops indefinitely in a WebKitGTK browser because it demands a WebGL device fingerprint.
A web page that shows you everything the browser told it without asking(sinceyouarrived.world)
495 points by mwheelz | 243 comments
An interactive web page that displays the information a browser reveals to websites automatically, such as device and environment details, without asking permission.
LinkedIn scans for 6,278 extensions and encrypts the results into every request(404privacy.com)
398 points by un-nf | 172 comments
A 404 Privacy blog post reporting that LinkedIn probes for 6,278 browser extensions and encrypts the results into requests, and how the data is used.
We found a stable Firefox identifier linking all your private Tor identities(fingerprint.com)
888 points by danpinto | 269 comments
Fingerprint blog post describing a stable Firefox identifier, reportedly via IndexedDB, that can link a user's separate private Tor Browser identities.
LinkedIn is searching your browser extensions(browsergate.eu)
1823 points by digitalWestie | 731 comments
Advocacy site "BrowserGate" alleging that LinkedIn runs hidden code scanning visitors' installed browser extensions and sharing results with third parties.
ChatGPT won't let you type until Cloudflare reads your React state(buchodi.com)
922 points by alberto-m | 596 comments
A blog post reverse-engineering the encrypted Cloudflare program that inspects ChatGPT's React state before allowing users to type.
LinkedIn checks for 2953 browser extensions(github.com)
459 points by mdp | 215 comments
GitHub repository documenting how LinkedIn probes for nearly 3,000 Chrome extensions to fingerprint users, with extension ID lists and scripts.
The privacy nightmare of browser fingerprinting(kevinboone.me)
692 points by ingve | 392 comments
Kevin Boone's personal blog essay on how browser fingerprinting undermines web privacy beyond third-party cookies and de-Googling efforts.
Supercookie: Browser Fingerprinting via Favicon (2021)(github.com)
332 points by vxvrs | 93 comments
GitHub repository for Supercookie, a proof-of-concept that uses favicon caching to fingerprint and track browsers across sessions.
Show HN: I'm building a browser for reverse engineers(nullpt.rs)
318 points by nullpt_rs | 42 comments
Blog post from nullpt.rs introducing a custom browser being built for web reverse engineering, deobfuscation, and anti-bot analysis workflows.
Blocked by Cloudflare(jrhawley.ca)
560 points by jrhawley | 384 comments
A personal blog post by James Hawley describing being locked out of a work-related website by Cloudflare's bot protection and secure connection loop.
Brute-forcing a macOS user’s real name from a browser using mDNS(fingerprint.com)
382 points by danpinto | 148 comments
Fingerprint blog post demonstrating how a website can brute-force a macOS user's real name via mDNS hostname lookups from the browser.