Canvas Fingerprinting

[CriticalRabbit 6]

I’m trying to find a good add-on for Firefox that will help prevent canvas fingerprinting. Does anyone have any suggestions? I’ve found this add-on https://addons.mozilla.org/en-US/firefox/addon/canvasblocker/?src=search that works but I’m hesitant to use on my main browser because it’s closed source. Does anyone know much about this add-on or trust it? It appears that Mozilla has preliminarily reviewed it though.

[InactiveUser 188]

I don't have any opinion on CanvasBlocker but there are a couple of problems with it:

• it interferes with other extensions instead of only affecting websites
• the author makes it unnecessarily difficult to work with the code  (but it's technically open source and also free-software licensed!)

I don't use any extension to prevent canvas fingerprinting. Instead, I

• block scripts with NoScript (canvas fingerprinting requires JavaScript)
• use Tor Browser, which asks you whether to allow canvas image extraction (without the need to block scripts)

[rickjames 106]

RAS / Random agent spoofer can block canvas. However in the latest version it also disables http caching to do it.

 

Ras @ git

https://github.com/dillbyrne/random-agent-spoofer/releases

 

I use it atm but only for a single desktop agent@no timer + fake screen res + fake timezone.

Then nearly everything in the 'Extra' section.

 

Its handy for when javascript is needed because all the info js can pull is moot. If anyone try's it just make sure you run a useragent and resolution that's extremely popular. -from testing so far it also spoof's the res even if ff is in full screen.

 

@sheivoko

I have no idea if this addon conflicts with other addons. Tbh I haven't looked at the code. Its only running on a machine I'm pretty 'lax' with. If you're aware of any conflicts or issues with it give a shout.

[Guest]

Also I believe Privacy Badger extension by EFF blocks this

[InactiveUser 188]

I tried Privacy Badger on both Chrome and Firefox, it didn't prevent canvas fingerprinting (I used https://www.browserleaks.com/canvas to check). It's still in alpha, maybe they add such functionality later on.

Their FAQ: "The alpha release of Privacy Badger only protects you against tracking by third party sites. In the future we plan to add some privacy protections for "first party" sites that you actually visit"

[lsat 23]

add EasyPrivacy filter list in Adblock Plus

[InactiveUser 188]

The EasyPrivacy list might block some canvas tracking scripts but it's a static list (blocking scripts by file name / origin, not by behavior). It can't stop websites from using canvas fingerprinting techniques embedded in otherwise innocuous script files. To prove my point: My adblocker does use the EasyPrivacy list but it doesn't stop https://www.browserleaks.com/canvas

[lsat 23]

The EasyPrivacy list might block some canvas tracking scripts but it's a static list (blocking scripts by file name / origin, not by behavior). It can't stop websites from using canvas fingerprinting techniques embedded in otherwise innocuous script files. To prove my point: My adblocker does use the EasyPrivacy list but it doesn't stop https://www.browserleaks.com/canvas

You're right.  I've also added CanvasBlocker add-on.

[go558a83nk 362]

 

I don't have any opinion on CanvasBlocker but there are a couple of problems with it:

• it interferes with other extensions instead of only affecting websites
• the author makes it unnecessarily difficult to work with the code  (but it's technically open source and also free-software licensed!)

I don't use any extension to prevent canvas fingerprinting. Instead, I

• block scripts with NoScript (canvas fingerprinting requires JavaScript)
• use Tor Browser, which asks you whether to allow canvas image extraction (without the need to block scripts)

 

what other extensions does canvasblocker interfere with?  I've begun to use it and need to know what to look out for

[InactiveUser 188]

 go558a83nk:

YoutubeCenter https://github.com/kkapsner/CanvasBlocker/issues/7

Random Agent Spoofer (only if RAS is also set to block canvas) https://github.com/kkapsner/CanvasBlocker/issues/16

There shouldn't be too many other issues but I found it odd that it would affect other extensions at all. For example, using NoScript obviously doesn't stop other extensions using JavaScript internally.