Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

User/browser fingerprinting without cookies

I'm sure that many of you have heard about this: http://panopticlick.eff.org/

It's a way to form a somewhat unique fingerprint of a web site visitor based on information about their browser, fonts, plugins, etc...

Does anyone know of a library (python!?) to do this?

I'd like to allow for visitors to vote on a poll without having to have an account...

like image 273
Art Avatar asked May 10 '10 00:05

Art


People also ask

Does fingerprinting use cookies?

The data that makes up your fingerprint can include the language you use, keyboard layout, your timezone, whether you have cookies turned on, the version of the operating system your device runs, and much more.

What is the difference cookies and browser fingerprinting?

Unlike cookies, it's hard to stop fingerprinting. Cookies are stored in your browser, and it's possible to delete your cookie history, block them, or turn them off entirely. “With the fingerprinting, it's all invisible,” Emm says.

Is browser fingerprinting possible?

Your settings like the screen you use, the fonts installed on your computer, and even your choice of a web browser can all be used to create a fingerprint. If you have a commonly used laptop, PC or smartphone, it may be harder to uniquely identify your device through fingerprinting.

Is browser fingerprinting GDPR compliant?

While GDPR does not ban the use of browser fingerprinting, it does require companies to be transparent about the data collection process and ask for consent when personal data processing is involved.


1 Answers

You could get jQuery to send that data to your server, and garner the rest on receipt of that request from HTTP headers.

Create a checksum, bish-bash-bosh done.

warning as much of that information is JS provided (this also applies to the user agent) it is very easily manipulated. If you have a single hash, I only have to change one small value (like browser version) to get a new vote.

Sounds dangerous ... why not just use logins like everyone else, it's easy with OpenID nowadays.

like image 133
Aiden Bell Avatar answered Oct 16 '22 21:10

Aiden Bell