[Stealth Mode] Block canvas fingerprinting

[ameshkov]

http://forum.adguard.com/showthread.php?6552-Canvas-Fingerprinting-and-HTML5-Canvas-Fingerprinting

More reading:
https://forum.adguard.com/index.php?threads/adguard-and-stealthmode-canvas-defender.12437/

[ghost]

Firefox has an addon for this. Might help to figure the best implementation.
https://addons.mozilla.org/en-US/firefox/addon/canvasblocker/

[ameshkov]

In fact I am pretty sure that disabling "" access won't help at all. They will simply use another element to get your fonts and plugins list. The problem with all this fingerprinting is that there is no bulletproof protection. Here is a good article about this: https://panopticlick.eff.org/about

[ameshkov]

Example of such script:
https://www.thisisacoolthing.com/fp.js

[theseanl]

http://dpiw925yvtpfq.cloudfront.net/Bbm9BN1BRGyhTbVhecQFkWg%3D%3D

[theseanl]

http://lib.vmweb.net/identity.min.js
Source: https://source.ind.ie/better/content/blob/master/trackers/vmweb.net/index.md

[theseanl]

https://marketing.al.ly/adb.php?tag=50756b5fd4b6aa7d561&width=460&height=60

[Bluscream]

Do we really nees to block all this scripts one by one?

[ameshkov]

We just collect fingerprinting examples in this issue in order to analyse them and come up with some generic solution.

[theseanl]

There is a comprehensive list of examples here: https://webcookies.org/canvas-fingerprinting/

[Bluscream]

Ah okay, thanks <3

[ameshkov]

Wow, great link!

[ameshkov]

One more example:
https://code.createjs.com/createjs-2015.11.26.min.js

[ameshkov]

Also, I was reviewing code of the AMO add-on: https://addons.mozilla.org/en-US/firefox/addon/canvasblocker/ and literally loved it.

It was mentioned above.

[ameshkov]

More info:
http://cseweb.ucsd.edu/~kmowery/papers/js-fingerprinting.pdf
http://www.w2spconf.com/2013/papers/s2p1.pdf
https://www.reddit.com/r/netsec/comments/4l9fnq/tor_browser_fingerprint_demo_page/
http://valve.github.io/fingerprintjs/
https://amiunique.org/fp

[confessor-adguard]

Service that helps to understand how unique your "fingerprint", it uses are pretty simple checks.
https://fpcentral.irisa.fr/fp

[ViRb3]

May I ask why this was closed? I could not find this feature in any AdGuard product, and I believe it is critical in order to even somewhat resist fingerprinting. With all AdGuard for Windows protections turned on, https://panopticlick.eff.org/ still uniquely identifies my browser. This doesn't quite live up to the claims on the blog:

AdGuard is able to prevent fingerprinting almost completely. (source)