Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Strict fingerprint blocking generates strange WebGL Vendor & Renderer value #26508

Closed
ghost opened this issue Nov 3, 2022 · 1 comment
Closed
Labels
closed/invalid feature/shields/fingerprint The fingerprinting (aka: "device recognition") protection provided in Shields OS/Desktop privacy

Comments

@ghost
Copy link

ghost commented Nov 3, 2022

Description

Strict fingerprint blocking generates strange WebGL Vendor & Renderer value. According to EFF generated value is fvXrVKFi~ePHDBAgw which mean one in 223253 browsers have this value which is very unique.

Steps to Reproduce

  1. Launch Brave
  2. Set Shields > Block fingerprinting option to 'Strict, may break sites'
  3. Proceed to EFF CoverYourTracks and test browser's fingerprint

Actual result:

image

Expected result:

image

Reproduces how often:

Easily reproduced

Brave version (brave://version info)

1.45.118 Chromium: 107.0.5304.91 (Official Build) (arm64)

Version/Channel Information:

  • Can you reproduce this issue with the current release? Yes
  • Can you reproduce this issue with the beta channel? Yes
  • Can you reproduce this issue with the nightly channel? Yes

Other Additional Information:

  • Does the issue resolve itself when disabling Brave Shields? No
  • Does the issue resolve itself when disabling Brave Rewards? No
  • Is the issue reproducible on the latest version of Chrome? Unable to test
@ghost ghost added the OS/Desktop label Nov 3, 2022
@rebron rebron added the feature/shields/fingerprint The fingerprinting (aka: "device recognition") protection provided in Shields label Nov 4, 2022
@ShivanKaul
Copy link
Collaborator

This is expected behaviour. With strict fingerprinting, those strings are randomized per-registrable-domain, per-browsing-session, per-user. We've reached out to EFF to see if they can account for this in their tests (they do it for other APIs).
Also, we're planning on deprecating the strict fingerprinting mode altogether: #31229

@ShivanKaul ShivanKaul closed this as not planned Won't fix, can't repro, duplicate, stale Aug 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
closed/invalid feature/shields/fingerprint The fingerprinting (aka: "device recognition") protection provided in Shields OS/Desktop privacy
Projects
None yet
Development

No branches or pull requests

3 participants