Hacker News new | ask | show | jobs
Browser fingerprinting using only CSS (csstracking.dev)
64 points by willemlabu 1632 days ago
4 comments
marapuru 1632 days ago
This is awful, especially knowing it will be used to identify people that want to stay anonymous. But I'm glad this got published for awareness.

By not loading CSS by default, you can probably block this identification behavior. Haven't tested it though.

link
capableweb 1632 days ago
I'm glad things like Tor Browser exists, seems to mostly defeat most (if not all) of the properties listed on the site.
link
mekster 1631 days ago
Can you really stop tracking in a realistic way?

Etag tracking also sounds hard to defend.

link
no_time 1631 days ago
If you know what contributes to your fingerprint you can make create a new fingerprint for every session. This may result in decreased functionality.
link
webmobdev 1632 days ago
Sigh. Hope uBlock Origin will start blocking these kind of CSS trackers too.
link
no_time 1631 days ago
Blocking the tracker is a fingerprintable action by itself.
link
NmAmDa 1631 days ago
Unless many people do that.
link
no_time 1631 days ago
I don't see that ever becoming a reality unless apple and mozilla join forces to enforce anti-fingerprinting standards at the cost of crippling website features, at least in private browsing mode. The other 2 players in the browser space have vested interest in keeping everything the way it is now.
link
webmobdev 1628 days ago
If uBlock Origin deploys it, and makes it a default, it will be automatically enabled for 5+ million users on Firefox.
link
solidr53 1631 days ago
Scary stuff, but is that enough information to fingerprint someone?

I’m thinking hundreds or thousands of iPhone 13 on the same IP thru a GSM network. How will you know?

Won’t you need battery status and all that other bits also

link
bilalnpe 1631 days ago
Yes, this alone probably won't lead to unique user. This would be just another data point to narrow down the probable users.
link