CanvasBlocker Legacy Changes the JS-API for modifying to prevent Canvas and other Fingerprinting. Certificate Patrol Monitor and compare certificates your application adopts for encrypted HTTPS web sites. Change Referer Button Change the referer with a button. This add-on allows users to prevent websites from using some Javascript APIs to fingerprint them. Users can choose to block the APIs entirely on some or all websites (which may break some websites) or just block or fake its fingerprinting-friendly readout API. IMPORTANT: you should only have ONE addon/setting set that protects.
A Firefox extension to protect from being fingerprinted. The canvas-drawing functions are not affected by CanvasFingerprintBlock, so websites that use the canvas for basic drawing will not be affected. On the other hand, when a website tries to export. Use Messages for web to send SMS, MMS and chat messages from your computer. Open the Messages app on your Android phone to get started.
CanvasBlocker
https://addons.mozilla.org/en-US/firefox/addon/canvasblocker/
Blocks the JS-API for modifying <canvas> to prevent Canvas-Fingerprinting.</canvas>
This add-on allows users to prevent websites from using the Javascript <canvas> API to fingerprint them. Users can choose to block the <canvas> API entirely on some or all websites (which may break some websites) or just block or fake its fingerprinting-friendly readout API. More information on <canvas> fingerprinting can be found at http://www.browserleaks.com/canvas.
The different block modes are:</canvas></canvas></canvas>
Firefox's native PDF reader uses the <canvas> API to display PDF content, so blocking it for MIME-content type of '*/pdf' will prevent the PDF reader from working. Therefore, the <canvas> API is enabled for PDFs by default, but it can be disabled without affecting the block mode setting.
At present, only my domain (kkapsner.de) is whitelisted by default.
Please report issues and feature requests at https://github.com/kkapsner/CanvasBlocker/issues
A highly experimental version for Android is available at https://github.com/kkapsner/CanvasBlocker/tree/android</canvas></canvas>
This is a high priority project
Download
Categories
Licensing
Verified by
Notes
Leaders and contributors
Resources and communication
Software prerequisites
Canvas Fingerprint Blocker
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the page “GNU Free Documentation License”.
The copyright and license notices on this page only apply to the text on this page. Any software or copyright-licenses or other similar notices described in this text has its own copyright notice and license, which can usually be found in the distribution or license text itself.
Thought your canvas fingerprint blocker made you incognito? Think again.
As many know, canvas fingerprinting is the most recent development in web tracking. In the past, the easiest way to prevent web tracking was to block out the method of tracking entirely. For example, to prevent cookie tracking, you simply disable cookies in your browser.
But when it comes to canvas fingerprinting, things are not so cut-and-dry. Believe it or not, using a canvas fingerprint blocker can make you more trackable than if you weren’t using one. That statement defies common sense, but it’s true.
To understand why it is so, we must, first, explore canvas fingerprinting as a whole and how it works. Then we tackle canvas fingerprint blockers and why they don’t work. To conclude, we’ll cover the only modern and viable method that does work to stop canvas fingerprint tracking.
If you value your privacy and are currently using a canvas fingerprint blocker, this is must-know information for 2016.
The essence of fingerprinting
Canvasblocker Edge
Fingerprinting is taking your browser’s attributes and using them to create a tracking profile for you (technically, your computer).
As an example, imagine we start with a group of 1,000,000 visitors.
Imagine 60% of these visitors use Chrome and 40% – use Firefox. Our audience is now split into two groups.
Within these groups, each visitor will be using a different version of his or her respective browser. That’s another fingerprint. If we exist in an alternate universe where there are only three versions of Firefox, our 40% group is now split into three groups of 13.3% each.
Fingerprints continue to build on one another until visitors are categorized into very specific groups. The 1,000,000 visitors may be grouped into hundreds or thousands of smaller categories. Once you are in a group, website owners can then track you relatively easily.
But the problem with ordinary fingerprinting is that it’s not drilled-down enough for websites with big data. There are only a certain number of potential fingerprints. With lots of traffic, the categorized groups are usually still too big to use useful.
That’s when canvas fingerprinting comes into play.
Sign up for updates
Get the latest news and articles on browser fingerprinting and profile management. No spam, we promise!
Like fingerprinting, but infinitely more powerful
Canvas fingerprinting relies on the Canvas HTML5 element, which allows the browser to “draw” an image onto a web page. Every computer will generate a different unique image based on its particular browser and operating system attributes. For example, different browsers will use different image processing engines. Different operating systems will use different sub-pixel rendering engines. Et cetera, et cetera.
Many factors influence both, browser and operating system level when generating a canvas image. They all work together to create a very specific image and put you into a very small group. When the image you generate is combined with ordinary fingerprint tracking, canvas fingerprinting can put you into an even smaller group from there. Sometimes, canvas fingerprinting can separate groups so effectively that each “group” is an individual. That’s the ultimate goal.
And that’s why some users are so keen to prevent canvas fingerprinting from taking place. If you value anonymity, canvas fingerprinting doesn’t just make you trackable similar to what a cookie does. Canvas fingerprinting can identify you as you.
But stopping it is harder than meets the eye.
Canvas fingerprint blocking tactics – and why they don’t work
There are two primary ways to block canvas fingerprinting. Each one is equally ineffective.
Preventing canvas fingerprinting entirely
Your first instinct is probably to grab a browser extension that prevents the canvas image from loading. If it doesn’t load, they can’t track you – right?
Wrong. Preventing the canvas image from loading is an identifier in itself. Although the canvas fingerprint will not be sent, the fact that you did not load the canvas image will be. So, you will be sorted into a very small group of tech-savvy users who are also blocking fingerprints. From there, sometimes your ordinary fingerprints will be enough to identify you completely.
To visualize how this works, imagine you are standing in a crowd. Not caring about canvas fingerprinting is like you’re just standing there smiling. Having a canvas fingerprint blocker is like you’re standing there with a mask. No one is sure who you are exactly, but you’re the only one wearing a mask so you can be identified like that. Even if a few other people are wearing masks, you all are simply grouped as “the people wearing masks”.
If everyone were to use canvas fingerprint blockers (or wear masks, as in our example), they would be effective. But as it stands, almost no one uses canvas fingerprint blockers. Heck, it’s estimated that only 5% to 10% of web users utilize an ad blocker. The percentage of canvas fingerprint blockers must be a small fraction of that, and that’s not a big enough group to blend into – far from it.
Submitting random canvas fingerprints
Canvas Blocker
Using different fingerprints for every request doesn’t work for the same reason as submitting no fingerprint at all. Any regular visitor will not change his fingerprint during a session. So, if you change your fingerprint during a session, that behavior is unusual, and it’s enough to categorize you into an irregular group.
In our example, submitting random canvas fingerprint is like changing the outfit you wear every 10 seconds. On the first request, you look normal. But if you change your outfit 10 seconds later on the second request, even though you’re not wearing a mask, you still make yourself stand out. Normal people don’t change their outfits throughout the day or use different canvas fingerprint identities in a single session.
The only viable solution that exists
Most web users don’t want or need to go to the trouble of blocking canvas fingerprinting technology. If you are an experienced web user who values his or her privacy above all, there is a way.
Here’s how:
- Make the canvas fingerprinting function available on the websites you visit. (So it’s not clear you are wearing a mask.)
- Use a canvas identity with consistency. (So it’s not clear you are trying to avoid detection.)
- Switch up the identity when necessary. (To erase your tracks.)
You are still being tracked – that’s unavoidable. But you control the tracking. When you change your fingerprint, you destroy any evidence of your browsing history on the other fingerprint. You wipe the slate clean. And because you used the old fingerprint with consistency, you have not been sorted into an irregular group and tracked like that. No one can recognize that you wiped the slate clean in the first place.
Canvasblocker Github
Whew! We hope you stuck with us through that lengthy explanation. Canvas fingerprinting is on the rise, and “blockers” or “random submitters” will not keep you safe – in fact, they will make you more easily trackable.
Canvas Blocker Addon
And now you know why.