用 Canvas Fingerprint 取代部份 Cookie

Canvas Fingerprint 已經很久了,在「The Web never forgets: Persistent tracking mechanisms in the wild」說明了 Canvas Fingerprint 的歷史:

Canvas fingerprinting is a type of browser or device fingerprinting technique that was first presented by Mowery and Shacham in 2012.

原始論文可以在「Pixel Perfect: Fingerprinting Canvas in HTML5」這邊看到。原理是利用不同機器對字型 render 不一樣的原理再對產生出來的圖片 hash 後當作 cookie 替代品。

兩個禮拜前突然紅起來是因為被發現廣泛使用在很多服務以及網站上,像是 AddThis (於是一堆網站中獎),以及 WhiteHouse.gov (喔喔!),然後還有 YouPorn.com (XDDD):「White House Website Includes Unique Non-Cookie Tracker, Conflicts With Privacy Policy」、「Meet the online tracking device that is virtually impossible to block」。

拿 canvas fingerprint 去各瀏覽器的 extension 上找,目前 Google Chrome 上可以安裝「CanvasFingerprintBlock」來擋,Firefox 的沒找到?

This entry was posted in Browser, Computer, Firefox, GoogleChrome, Murmuring, Network, Security, Software, WWW and tagged , , , , , . Bookmark the permalink.

4 Responses to 用 Canvas Fingerprint 取代部份 Cookie

  1. Yelban says:

    Firefox addon adblock 提供的 EasyPrivacy 規則號稱可以阻擋 Canvas Fingerprint
    http://www.lunarsoft.net/featured/adblock-plus-with-easyprivacy-helps-stop-canvas-fingerprinting

  2. Ken Chen says:

    這個重複率似乎會很高?

  3. Dennis Cheung says:

    Fingerprint is not unique tracking?

  4. Pingback: Firefox 擋 Canvas Fingerprint 的套件 | Gea-Suan Lin's BLOG

Leave a Reply

Your email address will not be published. Required fields are marked *