Hacker News new | ask | show | jobs
by gruez 372 days ago
>That doesn't sound like you've actually read any of the widely adapted and used techniques, employed by everyone from PornHub to Meta, nor does it sound like you're willing to.

It doesn't look like you read the comment you're replying to either, because you failed to respond to any of the specific objections that were raised. Let's try again with the first one: do you have any proof that "canvas jitter" as you described it (ie. it varies between devices of the same model) actually exist?
1 comments
shakna 372 days ago
Have you bothered to look, yet? It's been in use since 2012. Responding to specifics, when someone is acting out of bad faith, isn't generally a good idea. But fine.

> In 294 experiments on Amazon’s Mechanical Turk, we observed 116 unique fingerprint values, for a sample entropy of 5.73 bits. This is so even though the user population in our experiments exhibits little variation in browser and OS.

https://hovav.net/ucsd/dist/canvas.pdf

https://securehomes.esat.kuleuven.be/~gacar/persistent/the_w...

https://doi.org/10.14722%2Fndss.2022.24093

https://web.archive.org/web/20141228070123/http://webcookies...

https://www.torproject.org/projects/torbrowser/design/#finge...

link
gruez 372 days ago
> In 294 experiments on Amazon’s Mechanical Turk, we observed 116 unique fingerprint values, for a sample entropy of 5.73 bits

The claim being disputed was "canvas jitter for each iPhone 15 Pro will be different", not the broader claim of whether canvas fingerprinting exists at all. 116 unique fingerprints out of 294 doesn't really prove the former is true, especially when you consider that people on Mechanical Turk are probably all on laptops/desktops, which have more hardware diversity compared to smartphones. Moreover if the claim is that every (?) iPhone of the same model has different canvas outputs because of "canvas jitter", wouldn't we expect far more unique fingerprints?

link
shakna 372 days ago
When that was the first attempt, over a decade ago? No.

But as these things don't sit still, a small perusal of any of the above links would give you the information you seek.

link