This project is a proof of concept that any website can identify and track you, even if you are using private browsing or incognito mode in your web browser. Many people think that they can hide their identity if they are using private browsing or incognito mode. This project will prove that they are wrong.
How to use the website
- Visit http://www.nothingprivate.ml and enter your name
- Click the "See the magic" button
- Visit the same website in Private browsing / Incognito mode
- See the magic
Don't scroll down and ruin the fun... Just follow the steps above...
Hope you are surprised!
Yes, nothing is free...
How to stay safe?
You can prevent browser fingerprinting by using some of the browsers listed in secure browsers list curated by the community.
Browser fingerprinting is just an example of several ways that can be used to track your identity. For some others visit Freecodecamp blog. Here's a picture from the blog that explains the current situation:
Some tech stuff
Nothing Private uses the browser fingerprinting feature of Client.js to obtain the fingerprint of your web browser. When you submit the form, this fingerprint is saved, along with your name in a MySQL database using PHP as a backend. The next time you visit the website your browser fingerprint is matched with the column in the database and your name is returned.
The current data points used for generating fingerprints are:
user agent, screen print, color depth, current resolution, available resolution, device XDPI, device YDPI, plugin list, font list, local storage, session storage, timezone, language, system language, cookies, canvas print
- Client.js Browser fingerprinting
- MySQL Database
- HTML & CSS
- Karma and Jasmine for unit testing
- Cypress for integration testing
Feel free to modify the code and open any pull requests. Also, be sure to read through the Contributing Guidelines
- Add more links
- Fix any typos
You can run nothing private locally via docker using the commands below:
git clone firstname.lastname@example.org:gautamkrishnar/nothing-private.git cd nothing-private docker-compose up -d # use --build to update image if you do 'git pull'
Special thanks to these rockstars:
Thanks to the 200K
Thanks to IssueHunt for sponsoring this project:
- Red Hat for the Openshift Pro plan sponsorship:
- BrowserStack for browser testing sponsorship:
- Sentry for error monitoring sponsorship:
- JetBrains for sponsoring the Open Source License to my favourite IDE WebStorm:
- 33giga.com.br for the blog post.
- Thanks to everyone who tweeted about this.
- Thanks to TechCycle for this demo video.
- Thanks to the @Mozilla community for discussing privacy issues. Some users even reported that nothing private is even working correctly with the latest version of Firefox Focus. They created an issue for it.
If you are having trouble using this project, please open a new issue and describe your problem.
Spread the word!
Liked the project? Just give it a star