Damn... I guess the next idea is going offline for good

all 36 comments

sorted by: hot top controversial new old
[–] 35 points 11 months ago (4 children)

Ultimately being truly anonymous on the internet is pretty hard, and thus VPNs are mostly helpful for getting around region blocks for streaming services, not for obtaining more privacy.

I disagree.

There seems to constantly be two sides of the privacy discussion with public VPN options and they're both wrong on their own. It's correct that using a VPN on its own is not enough to keep you private online, fingerprinting being one example to why. However, not using a VPN but having no identifiable browser fingerprint doesn't either, since your IP is still a fingerprint too.

I like to give the following analogies:

  1. Doing only an oil change on your vehicle but no other maintenance won't keep your vehicle running forever
  2. Doing all vehicle maintenances except oil changes won't keep your vehicle running forever

If the goal is to be private, remember that a VPN is only one tool in a very large tool belt.

  • source
  • hideshow 4 child comments
  • [–] 10 points 11 months ago (3 children)

    I think TOR would be more suitable than a VPN

  • source
  • parent
  • hideshow 3 child comments
  • [–] 15 points 11 months ago* (2 children)

    Tor is definitely another option. For my personal use however, I have my entire network covered by a VPN so all outgoing traffic uses it.

    I'm sure I could setup Tor to do the same, but I imagine my family and I would get blocked more heavily on sites, as well as get our bank accounts and such flagged or something.

    Like many things, it obviously depends on your threat model.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 21 points 11 months ago (1 child)

    no shit

    I use VPN because of the ISP and the network, not to become anonymous to the websites I visit.

  • source
  • hideshow 1 child comment
  • [–] 17 points 11 months ago (9 children)

    Back in the day there were apps that generated phony web searches to obfuscate your real searches. Seems like there could be tools to mess around and change browser fingerprints periodically. No?

  • source
  • hideshow 9 child comments
  • [–] 9 points 11 months ago (2 children)

    It could be done on the browser level (maybe it's something browsers like LibreWolf do), however, it would break sites that require the fingerprints to be the same for "security reasons" which may or may not be a legitimate claim.

    You could say "well, I'm not going to use that particular website then", but the problem is that there are less and less websites that don't require these technologies to function properly.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 11 months ago (1 child)

    Can you give an example of one of those websites?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 10 months ago

    Off the top of my head, no. What I do remember is that I couldn't use Librewolf as my daily browser because I had trouble using every other website. Might be an exaggeration, and it could have been due to other factors, not just resisting fingerprinting.

    I've just come across this article: https://kevinboone.me/fingerprinting.html

    The author describes the situation pretty well:

    you enable fingerprinting resistance in Firefox, or use Librewolf, you’ll immediately encounter oddities. Most obviously, every time you open a new browser window, it will be the same size. Resizing the window may have odd results, as the browser will try to constrain certain screen elements to common size multiples. In addition, you won’t be able to change the theme.

    You’ll probably find yourself facing more ‘CAPTCHA’ and similar identity challenges, because your browser will be unknown to the server. Websites don’t do this out of spite: hacking and fraud are rife on the Internet, and the operators of web-based services are rightly paranoid about client behaviour.

    You’ll likely find that some websites just don’t work properly, in many small ways: wrong colours, misplaced text, that kind of thing. I’ve found these issues to be irritations rather than show-stoppers, but you might discover otherwise.

  • source
  • parent
  • [–] 7 points 11 months ago* (last edited 11 months ago) (2 children)

    Already done, see: https://github.com/uazo/cromite

    When I go to the fingerprint test, a bunch of the values like canvas resolution and timezone are randomized.

    ...Not everything, though.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 11 months ago (1 child)

    Interesting... Tor, Mullvad, and other secure browsers, go to the exact opposite approach, though... they try to make everyone look the same so they can't tell you apart across IPs

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 11 months ago*

    Yeah, exactly.

    Cromite's explicit focus is, literally, antifingerprinting. With the goal of breaking cross site tracking I guess.

    A more accurate goal for Tor/Mullvad is anonymizing, e.g. “blending in with the crowd.”

    It’s like radically changing your clothes every day vs wearing super incognito stuff. Different means, each more optimal for different aspects of security/privacy.

  • source
  • parent
  • [–] 3 points 11 months ago (1 child)
  • [–] 10 points 11 months ago (2 children)

    Doesn't browser with anti-fingerpriting give the same settings to everyone using that browser so they all look like the same person?

  • source
  • hideshow 2 child comments
  • [+] 11 points 11 months ago* (last edited 8 months ago) (1 child)
  • [–] 2 points 11 months ago* (last edited 11 months ago)

    If you are using a popular VPN I guess that's an option, but if you are going through the onion, where several nodes are being monitored, being the only guy that looks different, regardless if each time is a different different, just makes you too easy to be tracked :P

  • source
  • parent
  • [–] 8 points 11 months ago* (7 children)

    Here are some extra tips for increased privacy:

    • Don´t use your browser in fullscreen
    • Download Chameleon for Firefox, it periodically changes the browser and OS it pretends to be

    OR: Use Chameleon and set yourself to the most common combo. Get lost in the noise.

  • source
  • hideshow 7 child comments
  • [–] [S] 3 points 11 months ago (3 children)

    What's the issue with full screen?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 11 months ago (2 children)

    randomlzing your window size shows trackers different resolutions.

    depending on which OS you use it won't show 1920x1080, as taskbars and other extras take off a few pixels.

    example: if your browser is fullscreen and only shows a resolution of 1920x1075 it could most likely mean you use macos (randomly chosen)

  • source
  • parent
  • hideshow 2 child comments
  • [–] 8 points 11 months ago* (last edited 11 months ago) (2 children)

    But VPNs aren't supposed to make you anonymous.
    They secure your data while in transit to/from the exit node. Maybe that's your job so you can access their LAN. Or it's a public VPN that secures your dada from the local WiFi or ISP you're directly connected to. That's all it's built for.

  • source
  • hideshow 2 child comments
  • [–] 0 points 10 months ago (1 child)

    And what do you thing HTTPS does exactly? Whe the web was HTTP sure VPN's had a point as people on public wifi could sniff your trafic. Now they can't.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 10 months ago*

    It only encrypts the data within the HTTPS packet. But where that packet is going is still transparent.

    It also doesn't do anything for non web traffic. Email through SMTP or IMAP, FTP, lots of things don't use HTTP at all.

  • source
  • parent
  • [+] 4 points 11 months ago* (last edited 2 days ago)
    [–] 3 points 10 months ago
    [–] 2 points 10 months ago

    This is a bit of a misnomer. No one PC can be fully anonymized or fully private, even if the PC provided fake data points, they will still be technically fingerprinted. Having said that, having a browser that tries to spoof stuff like LibreWolf, Tor or IronFox is decent.

    The gains in using a VPN, among other best practices is that helps --assuming people do not log on to something like Google-- is to minimize the fingerprint of the PC to you, as a user. Assuming one trust their VPN provider, helps.

    Tor leverages the point of having all users look and be fingerprinted mostly as the same, so you get lost in the shuffle and crowd.

  • source
  • [–] 2 points 10 months ago

    I just tried the Am I Unique site and I'm surprised by the amount of information the sites can have. Why do they know if I'm connected using 4G or 5G for example? Even using a privacy browser

  • source
  • [–] 1 point 10 months ago*

    Fingerprinting isn't allways synonym of the lack of privacy. But there are differences between fingerprinting for tracking and profiling reasons, which certainly is needed to block or to spoof, and tecnically data needed to show correctly the content of a page, eg the first public IP numbers to show the content in your lenguage, the fonts used, screen resolution, OS, browser engine...., all data which are the same for millon other users. We can block por complete the fingerprinting, but than we'll see that half of the pages are not shown correctly or don't even work. It's always an commitment to set the fingerprint blocking. VPNs add an privacy layer, but dont avoid fingerprintings, used as extension can't avoid that the browser connect first to the ISP before the VPN can create the tunnel, with which it may serve to skip country restrictions, but you are still seen by your ISP. It don't also blocking the fingerprinting, except the IP. To stay private depends more on other measures, DNScrypt, not to use apps, search engines and services which logs/share our activity, using ad/trackerblocker.... and the most important, common sense, not a tin foil hat. PEBCAK

  • source