Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Is this fingerprinting javascript-based, and therefore can be circumvented by whitelisting scripts, or are there server-side methods as well?


I'm not a security expert so I may be wrong (if so, someone please educate me). My impression is that if you own several websites and trackers, you can identify users by the specific combination of blocked and non-blocked trackers, plus data about their machine/OS, ISP, screen resolution, and browser languages, as well as checking to see if browser permissions are turned on for notifications, location, and the like. I'm not sure you can prevent that with a javascript-based approach alone.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: