Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Workers testing is easily defeatable. #265

Open
lainlives opened this issue Apr 24, 2024 · 6 comments
Open

Workers testing is easily defeatable. #265

lainlives opened this issue Apr 24, 2024 · 6 comments

Comments

@lainlives
Copy link

You can easily override pretty much all of the worker data with tampermonkey and get no "reds"

image

Very little of this is not spoofed.

@abrahamjuliot
Copy link
Owner

Nice. I have not tried tampermonkey. Looks cleanly applied. How about here?
https://github.com/abrahamjuliot/fpworker

I created a new label 😅

@abrahamjuliot
Copy link
Owner

Firefox, right? I wonder if it can be reproduced in Chromium...

@lainlives
Copy link
Author

lainlives commented Apr 27, 2024

Screenshot 2024-04-26 at 19-55-56 fpworker
I see I have to fix my fonts up some.
Also is webgl.enable-debug-renderer-info=false supposed to break GPU probing, doesn't on other fingerprinters.

@lainlives
Copy link
Author

lainlives commented Apr 27, 2024

Altering the userprefs in user.js also seems to get the same results, clean incorrect UA.
And doing it this way I don't need to rely on disabling firefox's worker navigation prefetching.

@lainlives
Copy link
Author

lainlives commented Apr 27, 2024

Nice. I have not tried tampermonkey. Looks cleanly applied. How about here? https://github.com/abrahamjuliot/fpworker

I created a new label 😅

Hah :3 I am not trying to save the world from tracking (well, maybe, if I do its a happy accident) But I have been poking at your tools for a while now to find various ways to break it. Like, having navigator be an exit call breaks your site in pretty amazing ways. Your site is also unloadable if the scripts crash (like say too many faults and get shut down by firefox) I learned when function tampering. But this one seemed like something you should be able to detect that something is an outright lie.
Fedora
Current FF beta

Oh not sure if I should make a bug report for this one, but TZ is buggy, its easier for me to make it believe a false location than my real one. But I imagine the timezone detection stuff is one of those 'flip of a coin on who its reliable on' more than it being a flip of a coin reliability in itself? I mean its possible my Firefox user profile creation date being older than some of the bug reporters causing some issues with that and and plausibly with the test sometimes coming back with odd data (logs indicate worker crashes)

@namename-123
Copy link

You can easily override pretty much all of the worker data with tampermonkey and get no "reds"

image

Very little of this is not spoofed.

I wonder, how can I replicate this? 🤔

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants