Detecting browser environments through templating

Talk about internet security, computer security, personal security, your social security number...
Post Reply
barbaz
Senior Member
Posts: 9282
Joined: Sat Aug 03, 2013 5:45 pm

Detecting browser environments through templating

Post by barbaz » Tue Jun 11, 2019 8:49 pm

https://www.ndss-symposium.org/wp-conte ... _paper.pdf

They can even detect some extensions that are supposed to enhance privacy.

I ran their PoC on my Waterfox and compared to the same Waterfox build in a clean profile. I tested both Waterfox 68 (my current daily browser) and the last Waterfox 56 profile I have on hand. Interestingly, the PoC detected NoScript Classic, and (I guess not really surprisingly) it detected some of my about:config customisations. More interestingly, NoScript 10 in my configuration borked the PoC, where Classic didn't.
*Always* check the changelogs BEFORE updating that important software!
-

Post Reply