browser fingerprinting explained - how it works and why it's bad.

แชร์
ฝัง
  • เผยแพร่เมื่อ 14 ต.ค. 2024
  • what is browser fingerprinting? in this video i explain how browser fingerprinting works (with real examples and demos) and how it's used by ad trackers, retailers, fortune 500 firms to track you (even without cookies), or in privacy or incognito mode. we deep dive into real-world browser fingerprinting methods and code and discuss why it's bad for the industry. finally we look at brave browser and how it attempts to protect you from browser fingerprinting and where it succeeds and fails.
    this video shows a browser fingerprinting demo written in Javascript, as well as showing some real world browser fingerprinting implementations in the wild. This video also shows all the various fingerprinting methods used including font fingerprinting, screen size, graphics card, user agent, canvas fingerprinting.

ความคิดเห็น • 40

  • @daveholliday4406
    @daveholliday4406 3 ปีที่แล้ว +4

    Hey Chris! Awesome video, love the channel. Great background lighting :)

    • @chrishayuk
      @chrishayuk  3 ปีที่แล้ว +1

      Thanks Dave!!! Glad you like, and yeah gone a bit crazy with the lights :)

  • @arnav_0397
    @arnav_0397 ปีที่แล้ว

    One question, why in the first place our browser sharing these footprints and if it is required for some xyz reason than why browser like brave sharing wrong instead or mixed? I'm newbee little here, plz explain. Thanks.

  • @khrismiddleton876
    @khrismiddleton876 2 ปีที่แล้ว +1

    can you review antidetect browser software Multilogin - Hidemyacc - Gologin - Adspower?

  • @clashwithkeen
    @clashwithkeen 10 หลายเดือนก่อน

    Turning on ResistFingerprinting breaks youtube videos for me. There's bands across the lower half. I found a supposed "fix" for it by adding a line to your filter list but it does not work for me.

  • @aaaaa5272
    @aaaaa5272 2 ปีที่แล้ว +1

    @Chris Hay
    May I suggest an additional video: "browser fingerprinting explained - how it works and why it's good". E.g. explain 1) how it can prevent fraud. 2) how it can prevent some sites to steal other sites content (Copyright violation)
    There are many good examples where browser fingerprinting can serve a good purpose.

    • @chrishayuk
      @chrishayuk  2 ปีที่แล้ว

      heyyyy, thanks for the suggestion

  • @competitiveprogramming7766
    @competitiveprogramming7766 2 ปีที่แล้ว +2

    now i understand why we can't use netflix same account on different machines maybe this is the reason

  • @AhmedAdel-xg1cm
    @AhmedAdel-xg1cm 11 หลายเดือนก่อน

    congratulations on the content could you share the code? I would like to study this!

  • @lilclipp2423
    @lilclipp2423 3 ปีที่แล้ว +2

    Can you do a tutorial on how to evade fingerprinting using browser emulators like Puppeteer with Node JS?

    • @chrishayuk
      @chrishayuk  3 ปีที่แล้ว +1

      Sure sounds like a good shout.. happy to do that

    • @MilitantAntiAtheism
      @MilitantAntiAtheism ปีที่แล้ว +1

      You can't avoid it, unless you disable both CSS and JS, and that alone will make you unique, so... no
      Let's say you disable javascript, because you do not want the javascript based fingerprinting, which is very popular, well... there is a CSS function called @supports, which can be used for much the same.
      Then, I wonder about the HTTP communcation in itself too. Because once back in time some tests were made on different browsers, which showed that different browsers and versions sent HTTP headers in diferent orders.
      Also, if you disable javascript or CSS, your browser will make a HTTP request each and every time for each page, and that is another datapoint.
      Nope. You cannot avoid fingerprinting.
      But you can use different browsers for different purposes. And that is probably the best way to go.

  • @johnholme783
    @johnholme783 2 ปีที่แล้ว +1

    Great video! Thanks for the info! Computer science is fascinating!

    • @chrishayuk
      @chrishayuk  2 ปีที่แล้ว

      Glad you enjoyed it!

  • @yourgflikesit
    @yourgflikesit 2 ปีที่แล้ว +2

    How does this work for switching a browser on the same computer or for using a virtual machine?

    • @chrishayuk
      @chrishayuk  2 ปีที่แล้ว

      tbh. using a VM will help, as you're bringing things down to a standard commonality, so there will be less identifying aspects of you. it's a good shout.

    • @trappedcat3615
      @trappedcat3615 2 ปีที่แล้ว

      @@chrishayuk It may depend on the VM configuration. Sometimes WebGL spells out clearly the VM software name.

  • @tobiaskarlsson9771
    @tobiaskarlsson9771 ปีที่แล้ว +1

    Tons of these parameters are highly correlated with each other (they will be the same for a specific computer model), which I feel like you failed to emphasize. However, I agree, with a few customizations and it doesn't take much for a user to become "unique". In my case, one of the killers is that I have multiple languages enabled in a combination that apparently is highly unusual.

  • @rendyraya2331
    @rendyraya2331 2 ปีที่แล้ว +1

    *Add Trace ekstension to change Screen resolution on brave browser or Vivaldi Browser*

    • @MilitantAntiAtheism
      @MilitantAntiAtheism ปีที่แล้ว

      How will brave react to @supports and @media, because if it screws that up, the user experience can be pretty bad. You know with the new @media queries you not only can get an estimate of the width and height, but also the prefered dark/light theme and whether you like animations or not and so on.

  • @吴家兴-q6f
    @吴家兴-q6f 2 ปีที่แล้ว

    Hope to see more videos on how to hide and modify your browser fingerprint

  • @p2egamer278
    @p2egamer278 3 ปีที่แล้ว +1

    Amazing content keep up the good work

    • @chrishayuk
      @chrishayuk  3 ปีที่แล้ว +1

      Awesome, thank you, glad it was useful

  • @mohannadalnono5222
    @mohannadalnono5222 ปีที่แล้ว

    Good video but i couldn’t see that code and don’t talk, WTF those variables names was ! It’s essential to learn how to code, not just program !

  • @sabernest9395
    @sabernest9395 ปีที่แล้ว

    Man we need the code for education purposes. I'm a college student and your code would be helpful for my research. please

  • @mohamedelhousany4960
    @mohamedelhousany4960 2 ปีที่แล้ว +1

    thanks again ..keep going

    • @chrishayuk
      @chrishayuk  2 ปีที่แล้ว +1

      thank you, glad you like that vid.. it's quite different to my other vids.

    • @mohamedelhousany4960
      @mohamedelhousany4960 2 ปีที่แล้ว +1

      @@chrishayuk yes > excellent

  • @mohamedelhousany4960
    @mohamedelhousany4960 2 ปีที่แล้ว +1

    thanks

  • @greghayes9118
    @greghayes9118 หลายเดือนก่อน

    Don't use your fingerprint. Swipe useing a knuckle.

  • @isayabendera
    @isayabendera 2 ปีที่แล้ว +1

    swahili gang from tz

    • @chrishayuk
      @chrishayuk  2 ปีที่แล้ว

      love swahili and tz.... used to work on m-pesa

  • @gtrguy17
    @gtrguy17 3 ปีที่แล้ว +2

    This is not a bad practice as it doesnt identify the person by any personal details such as name, email, device id, etc.. it is simply a way to assign a hashed secret key to a website visitor which is stored on the websites server. No code or cookie is stired in the users browser at any point. This method is used to identify a user when they revisit a website. Your bank uses fingerprinting to make sure it's you logging in and not someone else. This tech is also used by Amazon to make sure it's you placing an order and not some guy in russia fraudulabtly using your account. This method repsects privacy as much as is possible and still maintain a high level of security for your online assets. Bottom line this tech is needed and should not be seen as bad or as an enemy. If you want to worry about being tracked worry about biometrics, yeah today its a fingerprint tomorrow your dna. Now thats sonething to make a video about.

    • @chrishayuk
      @chrishayuk  3 ปีที่แล้ว +6

      hey kenny.. i agree for those use-cases it's an understandable technique for the fraud cases.. the danger is the linking of accounts when personally identifiable details are linked. i'll do a vid and show what i meant... agree on dna point.. slippery slope

  • @diego-castro
    @diego-castro 2 ปีที่แล้ว +1

    congratulations on the content could you share the code? I would like to study this!

    • @chrishayuk
      @chrishayuk  2 ปีที่แล้ว

      good shout, will share