The second subverts the whitelist mechanism of the popular NoScript Firefox extension, which selectively enables web pages' scripting privileges to increase privacy by allowing a site to determine if particular domains exist in a user's NoScript whitelist. The first uses the innate performance signature of each browser's JavaScript engine, allowing the detection of browser version, operating system and microarchitecture, even when traditional forms of sys-tem identification (such as the user-agent header) are modi-fied or hidden. The new fingerprints arise from the browser's JavaScript execution characteristics, making them difficult to simulate or mitigate in practice.
identify two new avenues for browser fin-gerprinting. They can be used constructively by sites to supplement tra-ditional means of user authentication such as passwords and they can be used destructively to counter attempts to stay anonymous online. These fingerprints allow browsing sessions to be linked together and possibly even tied to a user's identity. To date, many attempts have been made to fingerprint users on the web.
0 kommentar(er)
