creepjs icon indicating copy to clipboard operation
creepjs copied to clipboard

Workers testing is easily defeatable.

Open lainlives opened this issue 10 months ago • 6 comments

You can easily override pretty much all of the worker data with tampermonkey and get no "reds"

image

Very little of this is not spoofed.

lainlives avatar Apr 24 '24 04:04 lainlives

Nice. I have not tried tampermonkey. Looks cleanly applied. How about here? https://github.com/abrahamjuliot/fpworker

I created a new label 😅

abrahamjuliot avatar Apr 27 '24 00:04 abrahamjuliot

Firefox, right? I wonder if it can be reproduced in Chromium...

abrahamjuliot avatar Apr 27 '24 00:04 abrahamjuliot

Screenshot 2024-04-26 at 19-55-56 fpworker I see I have to fix my fonts up some. Also is webgl.enable-debug-renderer-info=false supposed to break GPU probing, doesn't on other fingerprinters.

lainlives avatar Apr 27 '24 00:04 lainlives

Altering the userprefs in user.js also seems to get the same results, clean incorrect UA.
And doing it this way I don't need to rely on disabling firefox's worker navigation prefetching.

lainlives avatar Apr 27 '24 01:04 lainlives

Nice. I have not tried tampermonkey. Looks cleanly applied. How about here? https://github.com/abrahamjuliot/fpworker

I created a new label 😅

Hah :3 I am not trying to save the world from tracking (well, maybe, if I do its a happy accident) But I have been poking at your tools for a while now to find various ways to break it. Like, having navigator be an exit call breaks your site in pretty amazing ways. Your site is also unloadable if the scripts crash (like say too many faults and get shut down by firefox) I learned when function tampering. But this one seemed like something you should be able to detect that something is an outright lie. Fedora Current FF beta

Oh not sure if I should make a bug report for this one, but TZ is buggy, its easier for me to make it believe a false location than my real one. But I imagine the timezone detection stuff is one of those 'flip of a coin on who its reliable on' more than it being a flip of a coin reliability in itself? I mean its possible my Firefox user profile creation date being older than some of the bug reporters causing some issues with that and and plausibly with the test sometimes coming back with odd data (logs indicate worker crashes)

lainlives avatar Apr 27 '24 01:04 lainlives

You can easily override pretty much all of the worker data with tampermonkey and get no "reds"

image

Very little of this is not spoofed.

I wonder, how can I replicate this? 🤔

namename-123 avatar May 05 '24 01:05 namename-123