Browser fingerprinting using only CSS (opens in new tab)

(csstracking.dev)

64 pointswillemlabu4y ago11 comments

11 comments

This is awful, especially knowing it will be used to identify people that want to stay anonymous. But I'm glad this got published for awareness.

By not loading CSS by default, you can probably block this identification behavior. Haven't tested it though.

capableweb4y ago

I'm glad things like Tor Browser exists, seems to mostly defeat most (if not all) of the properties listed on the site.

mekster4y ago

Can you really stop tracking in a realistic way?

Etag tracking also sounds hard to defend.

no_time4y ago

If you know what contributes to your fingerprint you can make create a new fingerprint for every session. This may result in decreased functionality.

webmobdev4y ago

Sigh. Hope uBlock Origin will start blocking these kind of CSS trackers too.

no_time4y ago

Blocking the tracker is a fingerprintable action by itself.

NmAmDa4y ago

Unless many people do that.

2 more replies

solidr534y ago

Scary stuff, but is that enough information to fingerprint someone?

I’m thinking hundreds or thousands of iPhone 13 on the same IP thru a GSM network. How will you know?

Won’t you need battery status and all that other bits also

bilalnpe4y ago

Yes, this alone probably won't lead to unique user. This would be just another data point to narrow down the probable users.

j / k navigate · click thread line to collapse

11 comments

marapuru4y ago

This is awful, especially knowing it will be used to identify people that want to stay anonymous. But I'm glad this got published for awareness.

By not loading CSS by default, you can probably block this identification behavior. Haven't tested it though.

capableweb4y ago

I'm glad things like Tor Browser exists, seems to mostly defeat most (if not all) of the properties listed on the site.

mekster4y ago

Can you really stop tracking in a realistic way?

Etag tracking also sounds hard to defend.

no_time4y ago

If you know what contributes to your fingerprint you can make create a new fingerprint for every session. This may result in decreased functionality.

webmobdev4y ago

Sigh. Hope uBlock Origin will start blocking these kind of CSS trackers too.

no_time4y ago

Blocking the tracker is a fingerprintable action by itself.

NmAmDa4y ago

Unless many people do that.

2 more replies

solidr534y ago

Scary stuff, but is that enough information to fingerprint someone?

I’m thinking hundreds or thousands of iPhone 13 on the same IP thru a GSM network. How will you know?

Won’t you need battery status and all that other bits also

bilalnpe4y ago

Yes, this alone probably won't lead to unique user. This would be just another data point to narrow down the probable users.

j / k navigate · click thread line to collapse