CreepJS is much better (and scarier) at fingerprinting you than EFF. I’ve not managed to completely fool it yet but I’ve got my score down to 0% trust, meaning the fingerprint it generates is pretty useless. I suspect the only way to totally fool it (by which I mean spoof my devices) would be to turn JS off completely.
On Safari 17 every time I visit the site it claims it’s my first visit, despite a trust score of 57%. Not sure if I’m interpreting the results wrong or ITP is just doing its job.
iOS 17 Safari (especially with enhanced fingerprint protection on) is really good at fingerprint protection. It rotates a few data points like canvas ID so that it makes you look like a new fingerprint each time.
Fingerprint analyzers can find out lots about your fingerprint that way, but if your fingerprint keeps changing, it becomes difficult to identify you. Unique fingerprints don’t mean anything if your fingerprint keeps changing.
Imagine I keep a log of everyone I encounter… their race, hair colour, eye colour, glasses shape, accent, gender, fingernail length, ear lobe shape, everything. I would probably encounter the same people every so often, and I would be able to recognize them from my log.
Now imagine that one of them started dying their hair and putting in coloured contact lenses, and they changed it up every day. I may be able to collect all of the details about them. They’re very unique. But… I couldn’t match them against anyone in my log, even though I’ve seen them multiple times.
Having a unique browser fingerprint is perfectly fine if it constantly changes. They can collect all of those details about you, but if you keep changing key details, they won’t be able to recognize you.
Yea, I’m just using the browser on my phone, with Private Relay and intelligent tracking prevention on for all websites. I’ve visited it a bunch of times now and I’ve gotten it to count consecutive visits a few times, but if I just wait a little while and refresh it goes back to 1 and the fuzzy fingerprint is wildly different
CreepJS is much better (and scarier) at fingerprinting you than EFF. I’ve not managed to completely fool it yet but I’ve got my score down to 0% trust, meaning the fingerprint it generates is pretty useless. I suspect the only way to totally fool it (by which I mean spoof my devices) would be to turn JS off completely.
On Safari 17 every time I visit the site it claims it’s my first visit, despite a trust score of 57%. Not sure if I’m interpreting the results wrong or ITP is just doing its job.
I’m not 100% sure but I don’t think creep stores anything on its github incarnation so it’ll always look like it’s your first visit.
iOS 17 Safari (especially with enhanced fingerprint protection on) is really good at fingerprint protection. It rotates a few data points like canvas ID so that it makes you look like a new fingerprint each time.
Fingerprint analyzers can find out lots about your fingerprint that way, but if your fingerprint keeps changing, it becomes difficult to identify you. Unique fingerprints don’t mean anything if your fingerprint keeps changing.
That’s what I was kind of thinking/hoping based on the results, but I wasn’t sure if I was understanding it right. Thanks for elaborating!
Imagine I keep a log of everyone I encounter… their race, hair colour, eye colour, glasses shape, accent, gender, fingernail length, ear lobe shape, everything. I would probably encounter the same people every so often, and I would be able to recognize them from my log.
Now imagine that one of them started dying their hair and putting in coloured contact lenses, and they changed it up every day. I may be able to collect all of the details about them. They’re very unique. But… I couldn’t match them against anyone in my log, even though I’ve seen them multiple times.
Having a unique browser fingerprint is perfectly fine if it constantly changes. They can collect all of those details about you, but if you keep changing key details, they won’t be able to recognize you.
Do you have js enabled?
Trying to figure out how to accomplish this - doesn’t even work on tor
Yea, I’m just using the browser on my phone, with Private Relay and intelligent tracking prevention on for all websites. I’ve visited it a bunch of times now and I’ve gotten it to count consecutive visits a few times, but if I just wait a little while and refresh it goes back to 1 and the fuzzy fingerprint is wildly different
Wow yea this seems really good. And scary. Too bad it doesn’t seem to work with mullvad browser
I get 0% on CreepJS with default DDG browser set to “strict”, with a crowd blending score of 27%.
I get 40.7% with Mull + adblocker and 66.5% with FF + adblocker