Fingerprinting Protection in 0.57.18

privacy
#1

Description of the issue:

I am new to Brave browser - coming from Firefox and so far so good. But have a question regarding Fingerprint Protection in version 0.57.18.

The default setting is: Block 3rd party Fingerprinting and checking against https://panopticlick.eff.org. Both canvas hash of fingerprint and webgl hash of fingerprint are static.

canvas fingerprint: f2368e4ac8d1d799d24aff28d6757749
webgl fingerprint: 279d1e14ef99e0c050824801b09c5739

Are these the expected values?

I have found other community links addressing this but it seems that was for the legacy version of Brave.

The above URL says that the webgl hash should be ‘undetermined’.

Steps to Reproduce

  1. Fingerprint protection = Block 3rd party Fingerprinting in Brave settings
  2. Browse to https://panopticlick.eff.org and run the test
  3. When the results are shown select the link ‘Show full results for fingerprinting’

Expected result:
Unsure of expected result.

Reproduces how often:
Reproduced every test performed via https://panopticlick.eff.org

Brave Version(about:brave):
0.57.18

Reproducible on current live release (yes/no):
Yes

Additional Information:
Brave installed on macOS 10.14.2

Extensions installed:
UBlock Origin
Privacy Badger
Decentraleyes
1Password X
Cookie AutoDelete
HTTPS Everywhere

#2

The results you’re seeing mean that the first party (in this case, panopticlick.eff.org) is able to generate unique canvas and webgl fingerprints. Your configuration only prevents third parties from generating fingerprints, and so isn’t protecting you from panopticlick’s fingerprinting.

To see the effects of fingerprinting protection, change your fingerprinting (or, device recognition) protection settings in shields to “Device Recognition Blocked” and re-run the test. You should get cf04c1dcb26ef79705764e5c22d0e711 for the canvas fingerprint, and undetermined for the WebGL fingerprint (if you don’t, pease let us know!).

You getting the same, predictable values for those measures mean that, at least by those measures, websites won’t be able to distinguish your browser from other peoples’ browsers.

5 Likes
#3

OK, Thanks for confirming.

I have changed my fingerprint protection to “Device Recognition Blocked”, and can confirm I have the same canvas fingerprint to what you said I should get. Also, WebGL fingerprint is undetermined.

Thanks!

1 Like
closed #4