[drbawb]

Fonts are part of the fingerprint, especially if you know the OS. You take the set of installed fonts and subtract the set of OS default fonts, and you are likely to arrive at a unique key.

Take my corporate domain for instance: you could identify any machine on my domain since we'd all have a custom typeface installed (used on our company letterhead.) You could further identify our marketing coordinator, because she has a lot of strange typefaces used for signage and promotions. You could probably further identify me as a web developer since I have a lot of WOFF2 packaged fonts installed.

[ballenf]

Side question -- do/could type foundries find pirate companies by looking at IP addresses using paid fonts without a license? Hardest part would be linking paid licenses to IP addresses, making individual unpaid usage harder to nail down. But if a company with dozens or hundreds of users at a single IP address all had a particular font installed, that IP was linkable to the company, and company didn't have a license, wouldn't that be pretty damning evidence?

Typeface piracy is otherwise pretty difficult to detect isn't it? Is it part of normal enterprise asset tracking / inventory systems?