Page 1 of 1

Detecting browser environments through templating

Posted: Tue Jun 11, 2019 8:49 pm
by barbaz
https://www.ndss-symposium.org/wp-conte ... _paper.pdf

They can even detect some extensions that are supposed to enhance privacy.

I ran their PoC on my Waterfox and compared to the same Waterfox build in a clean profile. I tested both Waterfox 68 (my current daily browser) and the last Waterfox 56 profile I have on hand. Interestingly, the PoC detected NoScript Classic, and (I guess not really surprisingly) it detected some of my about:config customisations. More interestingly, NoScript 10 in my configuration borked the PoC, where Classic didn't.