6 ms·

Someone should also look into the "navigator" variable that websites can access. It provides a strangely open look into the user's machine. For example, it all

Someone should also look into the "navigator" variable that websites can access. It provides a strangely open look into the user's machine. For example, it allows websites to know about your OS, your CPU and your memory. The "window" object also provides data that I would consider private. Like the screen size. Websites should only know the window size. Demo: https://jsfiddle.net/uvtLc784/ https://jsfiddle.net/uvtLc784/

flutas 4y ago
> Someone should also look into the "navigator" variable that websites can access. It provides a strangely open look into the user's machine. For example, it allows websites to know about your OS, your CPU and your memory. Looks like it's full of red herring values to me, at least Chrome 107 on a (M1) MBP. That being said, it's always good to remove anything that can be used to fingerprint a user. It reported the following... - CPU as undefined - Memory as 8GB (32GB in actuality) - Platform as MacIntel (Should be Mac-AArch64)
- 400thecat 4y ago
  same for me. It only guessed screen resolution correctly
- secondcoming 4y ago
  For me on various browsers: Firefox: CPU: Windows NT 10 Memory: undefinedGB Screen: 2560x1440 Brave: CPU: undefined Memory: 0.5GB Screen: 2560x1440 Edge: CPU: undefined Memory: 8GB Screen: 2560x1440 Actual values: Windows 10, 128GB, 3820x2160
  - chipsa 4y ago
    That's a crapton of RAM, but are you running on a scaled display? Specifically at 150% scaling?
    - secondcoming 4y ago
      Ah, yes on the scaling
      - chipsa 4y ago
        Yeah, I’m pretty sure it’s showing logical pixels, not physical pixels then. Mine as also showing the value you’d get for adjusting based on scaling.
- 130e13a 4y ago
  Interesting. Running this in Firefox on my M1 MBP, I get the following results: CPU: "Intel Mac OS X 10.15" Memory: undefined Screen: 1512x982 The CPU result is doubly incorrect, since a) it's not an Intel chip, and b) i'm running 12.5.1 instead of 10.15. The screen value is correct if you double it, i guess this is measured in points instead of pixels...
  - dao- 4y ago
    > The CPU result is doubly incorrect, since a) it's not an Intel chip, and b) i'm running 12.5.1 instead of 10.15. It looks like you've enabled resistfingerprinting? https://searchfox.org/mozilla-central/rev/eddb810ffd5499f0984123fe4bfea6064ebad3c8/toolkit/components/resistfingerprinting/nsRFPService.h#32 https://searchfox.org/mozilla-central/rev/eddb810ffd5499f098...
- UpToTheSky 4y ago
  The combination of your "CPU as undefined, Memory as 8GB, Platform as MacIntel" can still be used to fingerprint you. Independent of whether the values represent your actual hardware or not. And they are probably not even red herrings. undefind CPU simply means you use a certain type of browser that does not provide this value. 8GB memory probably means "8GB or more". MacIntel might simply be interpreted as "Some Mac".
corford 4y ago
>It provides a strangely open look into the user's machine. "navigator" is just the tip of the iceberg: https://abrahamjuliot.github.io/creepjs/ https://abrahamjuliot.github.io/creepjs/

flutas 4y ago

> Someone should also look into the "navigator" variable that websites can access. It provides a strangely open look into the user's machine. For example, it allows websites to know about your OS, your CPU and your memory. Looks like it's full of red herring values to me, at least Chrome 107 on a (M1) MBP. That being said, it's always good to remove anything that can be used to fingerprint a user. It reported the following... - CPU as undefined - Memory as 8GB (32GB in actuality) - Platform as MacIntel (Should be Mac-AArch64)

400thecat 4y ago
same for me. It only guessed screen resolution correctly
secondcoming 4y ago
For me on various browsers: Firefox: CPU: Windows NT 10 Memory: undefinedGB Screen: 2560x1440 Brave: CPU: undefined Memory: 0.5GB Screen: 2560x1440 Edge: CPU: undefined Memory: 8GB Screen: 2560x1440 Actual values: Windows 10, 128GB, 3820x2160
- chipsa 4y ago
  That's a crapton of RAM, but are you running on a scaled display? Specifically at 150% scaling?
  - secondcoming 4y ago
    Ah, yes on the scaling
    - chipsa 4y ago
      Yeah, I’m pretty sure it’s showing logical pixels, not physical pixels then. Mine as also showing the value you’d get for adjusting based on scaling.
130e13a 4y ago
Interesting. Running this in Firefox on my M1 MBP, I get the following results: CPU: "Intel Mac OS X 10.15" Memory: undefined Screen: 1512x982 The CPU result is doubly incorrect, since a) it's not an Intel chip, and b) i'm running 12.5.1 instead of 10.15. The screen value is correct if you double it, i guess this is measured in points instead of pixels...
- dao- 4y ago
  > The CPU result is doubly incorrect, since a) it's not an Intel chip, and b) i'm running 12.5.1 instead of 10.15. It looks like you've enabled resistfingerprinting? https://searchfox.org/mozilla-central/rev/eddb810ffd5499f0984123fe4bfea6064ebad3c8/toolkit/components/resistfingerprinting/nsRFPService.h#32 https://searchfox.org/mozilla-central/rev/eddb810ffd5499f098...
UpToTheSky 4y ago
The combination of your "CPU as undefined, Memory as 8GB, Platform as MacIntel" can still be used to fingerprint you. Independent of whether the values represent your actual hardware or not. And they are probably not even red herrings. undefind CPU simply means you use a certain type of browser that does not provide this value. 8GB memory probably means "8GB or more". MacIntel might simply be interpreted as "Some Mac".

corford 4y ago

>It provides a strangely open look into the user's machine. "navigator" is just the tip of the iceberg: https://abrahamjuliot.github.io/creepjs/ https://abrahamjuliot.github.io/creepjs/