[jptech]

Not an attack vector per se, but largely used for fingerprinting.

[1_player]

What's not used for fingerprinting nowadays?

[cookiengineer]

> What's not used for fingerprinting nowadays?

HTML tags.

[mmastrac]

I'm not sure if this is sarcastic or not, but most likely not true.

[egberts1]

Yes, WebGL remains a large surface area of an attack vector.

[WithinReason]

Disabling it makes your fingerprint more unique

[jptech]

Giving out a Null value has less entropy than a unique value. It may also be likely that it gets dropped when computing the overall fingerprint.

[WithinReason]

if 20% of people explicitly disable it then it carries log_2(5) = 2.32 bits of entropy so it's not going to get dropped.