Fingerprinting is blocked even though first party

Browser Support Desktop Support
1

Description of the issue:

I have a site at mutaframe.com, it uses hash of the fingerprint to make sure that the magic links for login are open from the same browser that requested them (the project is about healthcare/genetics so it is bit more constrained).

I load the script (fingerprint2.js) async from my own domain, however it is blocked unless I turn off “block 3rd party tracking”. As far as I know, in the latest addition to brave, the intention was not to block 1st party fingerprinting. Did I misunderstand that by thinking 1st party means payloads requested from host domain? Or does brave make some predefined checks against the requested files checksum to block it directly?

Steps to Reproduce (add as many as necessary):

  1. Go to mutaframe.com ,you’ll be redirected to deogen2.mutaframe.com
  2. Open the network tab and monitor the requests.
  3. It’ll ask you for a survey code, provide this: 69bfffe5713771d5b0e720b13271bf69
  4. At this point fingerprint2.js will be blocked.
  5. Repeat the above steps without 3rd party tracker blocking is off, and this time the script will load fine and the icons on the left will start appearing -> the site works.

Attachments

Since I’m a new user, I unfortunately could not upload it here, but you can view it from here:

It first shows the broken state till half of the video, then the normal one.

Expected result:

As far as I understand brave should not block a fingerprinting script if loaded from the host domain.

Reproduces how often:

As of latest version

Brave Version(about:brave):

Version 0.67.124 Chromium: 76.0.3809.100 (Official Build) (64-bit)

Reproducible on current live release (yes/no):

yes

Additional Information:

2

I couldn’t see fingerprint2.js can you screenshot the trackers items list?

3

Added an ss:

1598×760 183 KB

4

if you add the following to brave://adblock does that help?

@@||mutaframe.com/fingerprint2.js

5

It’s first time I looked at ad blocker syntax, I first tried as you suggested, then also added these:

@@||mutaframe.com/fingerprint2.js
@@mutaframe.com/fingerprint2.js
@@.mutaframe.com/fingerprint2.js
@@https://deogen2.mutaframe.com/fingerprint2.js

but to no avail :slightly_frowning_face:

6

My filter is enough, if you add it does it still show up in the list (like the screenshot)

7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.