[UpToTheSky]

Someone should also look into the "navigator" variable that websites can access. It provides a strangely open look into the user's machine.

For example, it allows websites to know about your OS, your CPU and your memory.

The "window" object also provides data that I would consider private. Like the screen size. Websites should only know the window size.

Demo: https://jsfiddle.net/uvtLc784/

[corford]

>It provides a strangely open look into the user's machine.

"navigator" is just the tip of the iceberg: https://abrahamjuliot.github.io/creepjs/

[flutas]

> Someone should also look into the "navigator" variable that websites can access. It provides a strangely open look into the user's machine. For example, it allows websites to know about your OS, your CPU and your memory.

Looks like it's full of red herring values to me, at least Chrome 107 on a (M1) MBP. That being said, it's always good to remove anything that can be used to fingerprint a user.

It reported the following...

- CPU as undefined

- Memory as 8GB (32GB in actuality)

- Platform as MacIntel (Should be Mac-AArch64)

[secondcoming]

For me on various browsers:

    Firefox:
        CPU: Windows NT 10
        Memory: undefinedGB
        Screen: 2560x1440

    Brave:
        CPU: undefined
        Memory: 0.5GB
        Screen: 2560x1440

    Edge:
        CPU: undefined
        Memory: 8GB
        Screen: 2560x1440

Actual values: Windows 10, 128GB, 3820x2160

[chipsa]

That's a crapton of RAM, but are you running on a scaled display? Specifically at 150% scaling?

[secondcoming]

Ah, yes on the scaling

[chipsa]

Yeah, I’m pretty sure it’s showing logical pixels, not physical pixels then. Mine as also showing the value you’d get for adjusting based on scaling.

[UpToTheSky]

The combination of your "CPU as undefined, Memory as 8GB, Platform as MacIntel" can still be used to fingerprint you. Independent of whether the values represent your actual hardware or not.

And they are probably not even red herrings. undefind CPU simply means you use a certain type of browser that does not provide this value. 8GB memory probably means "8GB or more". MacIntel might simply be interpreted as "Some Mac".

[130e13a]

Interesting. Running this in Firefox on my M1 MBP, I get the following results:

  CPU: "Intel Mac OS X 10.15"
  Memory: undefined  
  Screen: 1512x982

The CPU result is doubly incorrect, since a) it's not an Intel chip, and b) i'm running 12.5.1 instead of 10.15.

The screen value is correct if you double it, i guess this is measured in points instead of pixels...

[dao-]

> The CPU result is doubly incorrect, since a) it's not an Intel chip, and b) i'm running 12.5.1 instead of 10.15.

It looks like you've enabled resistfingerprinting?

https://searchfox.org/mozilla-central/rev/eddb810ffd5499f098...

[400thecat]

same for me. It only guessed screen resolution correctly