Slashdot Mirror


How Identifiable Are You On the Web?

An anonymous reader writes How identifiable are you on the web? This updated browser fingerprinting tool implements the current state of the art in browser fingerprinting techniques(including canvas fingerprinting) to show you how unique your browser is on the web. Good food for thought when three-letter agencies talk about "mere metadata."

160 comments

  1. /.ed? by whoever57 · · Score: 5, Interesting

    I haven't seen a /. effect for a long time.

    --
    The real "Libtards" are the Libertarians!
    1. Re:/.ed? by darkain · · Score: 5, Informative

      Agreed! Page isn't loading, that was fast as hell.

      For those looking for other resources tho, that DO load

      http://samy.pl/evercookie/

      https://panopticlick.eff.org/

    2. Re: /.ed? by assassinator42 · · Score: 2

      Almost certainly not from Slashdot. From their stats, most of their visitors are in France.

    3. Re: /.ed? by fahrbot-bot · · Score: 2

      Almost certainly not from Slashdot. From their stats, most of their visitors are in France.

      Probably French cabbies blocking the interweb tubes...

      --
      It must have been something you assimilated. . . .
    4. Re:/.ed? by Anonymous Coward · · Score: 0

      Thank you for the alternative links, but would it not be smarter to include a list of things to make your browser less unique?

    5. Re:/.ed? by rudametkin · · Score: 2

      [...] but would it not be smarter to include a list of things to make your browser less unique?

      Yes, recommending what to do to improve anonymity is one of our next possible steps, but to do so you need to have data to know what to recommend, hence the site. We're looking into a recommendation system for future work.

      P.S. I worked a little bit amiunique.org

  2. Totally and completely identifiable... by Bob_Who · · Score: 4, Insightful

    Always have been, and always will, for as long as light echos through space and time. But nobody really cares who I am. They know who I am, nevertheless.

    I am the walrus.

    1. Re:Totally and completely identifiable... by amalcolm · · Score: 1

      I'm the Eggman .. nice to finally meet you

      --
      Time for bed, said Zebedee - boing
    2. Re:Totally and completely identifiable... by Bob_Who · · Score: 1

      Goo goo g'joob !

    3. Re:Totally and completely identifiable... by Anonymous Coward · · Score: 0

      i am batman

    4. Re: Totally and completely identifiable... by Anonymous Coward · · Score: 0

      I used to be Birdman!

    5. Re:Totally and completely identifiable... by Anonymous Coward · · Score: 0

      I am Spartacus!

  3. seems Linux users can be tracked more easily by Anonymous Coward · · Score: 0

    User agent 0.95% "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36"

  4. Identifiable enough that Google targets ads by Anonymous Coward · · Score: 4, Interesting

    Google serves my computer ads for mens watches, it serves my wifes computer, on the same NAT, (the same PC, same screen resolution) ads for shoes. Both have cookies blocked and flash is disabled by default. Mine also blocks lots of google sites, yet I have yet to find a way to block doubleclick. Our browsers are both set to tell sites to "do no track". Neither of us uses Google for search these days, switching to Duck Duck Go.

    So the fingerprinting is enough for Google to send us personalized adverts.

    Now if someone can tell me the full list of domains I need to block to prevent DoubleClick (also from Google) from serving ads, I'd appreciate it.

    1. Re: Identifiable enough that Google targets ads by Alrescha · · Score: 2

      "Now if someone can tell me the full list of domains I need to block to prevent DoubleClick (also from Google) from serving ads, I'd appreciate it."

      I gently suggest that you're doing it wrong. Block everything *except* those sites you actually want to use. The list will be far, far shorter.

      For random exceptions, you might use startpage/ix-quick proxies, which filter JavaScript.

      A.

      --
      ...bringing you cynical quips since 1998
    2. Re: Identifiable enough that Google targets ads by networkzombie · · Score: 4, Informative

      Actually, no. Web surfing involves visiting a multitude of sites. Whitelisting would be painstakingly difficult, especially with the wife. Even whitelisting cookies is tedious, but cookies are what you should be whitelisting. After your accept all the cookies you need (bank, Slashdot, etc...) then block the rest. Simply visiting a web site is no reason to accept a cookie. If you can identify any sites to block (DoubleClick) then blacklisting is the way to go. We're not talking about a server here, it is a web browser. Imagine whitelisting 20 sites per hour while shopping for a pair of shoes.
      What I do is to identify what sites are serving me ads, surf those sites while capturing packets using your favorite tool (NetworkTrafficView from Nirsoft if using Windows is easy) and block those sites using your firewall (IPs) and/or hosts file (FQDNs). I haven't seen a DoubleClick ad in years. In Windows my hosts file looks like this:
      0.0.0.0 ad.doubleclick.net
      0.0.0.0 ad.uk.doubleclick.net
      0.0.0.0 ad.n2434.doubleclick.net
      0.0.0.0 doubleclick.net
      0.0.0.0 a.doubleclick.net
      The Slashdot filter made me cut quite a bit out, but you get the idea.
      This work has already been done and gets updated for you here: http://someonewhocares.org/hos...
      My Windows Firewall is more extensive. I block massive subnets in Russia, Ukraine, and China (ex. LACNIC Latin American and Caribbean 190.0.0.0/8). This is all for a laptop that leaves the house. For an in-home solution you should get a better router and block them at the gateway so your iPad is safe too. pfSense is very flexible, but DD-WRT can do some neat tricks.

    3. Re:Identifiable enough that Google targets ads by ledow · · Score: 4, Interesting

      Not being funny, but that's hardly tracking unless you are actually after a watch or shoes. I imagine a watch / shoes ad is the kind of thing that a company will push to everyone this near to Christmas.

      Also, I once got several months of leotard adverts because I happened to click something in our (school) web logs to check it was okay for pupils to see. There's just a correlation on the ad networks between your IP and something you may have clicked / searched / been on. It doesn't mean they are tracking you, per se. They just realise that you are two separate browsers with two separate signatures. Lots of things can do that, even being a single plugin different. Just being logged into a certain account on one site might push certain ads your way.

      Load up Ghostery and visit your normal sites. See how many of them are also serving up ads etc. that can form correlations between your browser and a certain product. Cookies blocked everywhere? I don't believe it, you'd never be able to log into anything. Flash disabled? Well, yes, I have that by default but for security not tracking. "Do not track" is an absolute waste of time. And just because duckduckgo doesn't track you, doesn't mean the sites you land on don't.

      Take this "for instance" - your wife went on a shoe shop once. You went on a watch shop once. Both the same IP. But one of you was also logged in elsewhere on a single other site. Bam. You get different ads. Just being a 0.1 version out on your browser will distinguish one from the other. Or having slightly different plugins. Or even just having different source port numbers (as NAT'ing will ensure).

      Sorry if you don't realise this, but the amount of effort you're putting into making your life hard and hiding, is actually just making you stand out just the same. How many hours have you wasted trying to block this stuff, and still you're identifiable?

      Either start fresh every session with a Privoxy proxy and fake user-agent strings, or don't bother. And even that won't hide you. And even then, you'll never know if the watch advert was for something you clicked years ago, or random spam because they know nothing about you and pick a random product. Hell, do you even know if you haven't each separately cached a random advert?

    4. Re:Identifiable enough that Google targets ads by Trax3001BBS · · Score: 1

      Now if someone can tell me the full list of domains I need to block to prevent DoubleClick (also from Google) from serving ads, I'd appreciate it.

      I use a HOSTS file, it serves me well; quite large at this time. I also take the time to read a sites TOS they will tell you what to block (though one link says they don't mention Flash Cookies (or one of the three mentioned).

      Read the TOS of ROVIO.COM (Angry Birds); "sent overseas" well where?
      When I last read it long ago it gave me a lot of sites to block; the most important being Flurry.com.

      Angry birds (all of ROVIO.COM programs) collect your information then sells it to Flurry.com (It's Google) who in turn sell it to parties who wish to target ads to you.

      Ever wonder why there are so many free game for your Cell Phone, they make money off of them selling to Flurry.com at the least. The information being sent or collected will or should be listed in a sites TOS. Most of the time you need to use your browser for Google's "Play Store" to get the website of the program your looking at.

    5. Re:Identifiable enough that Google targets ads by Anonymous Coward · · Score: 0
      "sent overseas" well where?

      Hackers.ru would be a good guess.

    6. Re:Identifiable enough that Google targets ads by Runaway1956 · · Score: 3, Informative

      Apparently, Ghostery is pretty effective at blocking doubleclick. I do not get those personalized advertisements. The ONLY place where "ads" are even somewhat accurately aimed at me, is Amazon. If/when I clear cookies, and browse without signng in, their limited accuracy disappears.

      --
      "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
    7. Re:Identifiable enough that Google targets ads by Anonymous Coward · · Score: 0

      Sounds like you're in an iApple, or not running Firefox.
      noScript prevents much of that nonsense, but is Firefox specific.
      iApples circumvent that protection and send out that info anyway.

    8. Re: Identifiable enough that Google targets ads by Alrescha · · Score: 1

      "Actually, no. Web surfing involves visiting a multitude of sites."

      Sorry, but blacklisting involves blocking a lot *more* sites, and ongoing maintenance to keep that list updated to account for changes that are out of your control. A whitelist needs initial setup, and only requires changes based on your needs.

      My browser is whitelisted. I do what I described.

      It is not 'painfully difficult', your wife acceptance factor notwithstanding. I (and I expect most people) visit the same sites day after day. I am not claiming it is for everyone, but if you want to stop the trackers, the best way is to never let your browser contact them.

      A.

      --
      ...bringing you cynical quips since 1998
    9. Re:Identifiable enough that Google targets ads by sinij · · Score: 1

      Why do you even....
      >>> "Cookies blocked everywhere? I don't believe it, you'd never be able to log into anything."
      Try wiping your cookies on session or window close. You can accept cookies and not keep them longer than necessary.

      >>>"Flash disabled? Well, yes, I have that by default but for security not tracking. "Do not track" is an absolute waste of time. And just because duckduckgo doesn't track you, doesn't mean the sites you land on don't."
      The sites will track them only if you let them. Regularly wipe cookies, blacklist via host file or firewall, tracking companies and you will no longer see any "targeted" leotard ads.

    10. Re:Identifiable enough that Google targets ads by Anonymous Coward · · Score: 0

      Apparently, Ghostery is pretty effective at blocking doubleclick. I do not get those personalized advertisements. The ONLY place where "ads" are even somewhat accurately aimed at me, is Amazon. If/when I clear cookies, and browse without signng in, their limited accuracy disappears.

      Amazon's advertising is a joke. They should damn well know that I already bought one.

    11. Re:Identifiable enough that Google targets ads by TheRaven64 · · Score: 1

      The problem is that they don't differentiate categories well. Having bought some kind of computer thing means that I might be interested in buying some kind of computer thing again, but having bought one hard drive probably doesn't mean that I want another very similar (but not identical) one soon. In books, it's very different - if I've bought one novel then I probably want to buy another very similar (but not identical) one next time I shop. The same is true for a lot of things on Amazon - DVDs, CDs, and even clothes - and so the algorithm works pretty well overall, it just fails laughably in some cases (ah, you've bought a USB flash drive, do you want to buy a different USB flash drive with the same capacity?).

      --
      I am TheRaven on Soylent News
  5. MEH by Jane+Q.+Public · · Score: 4, Informative

    First, the simplest of script blockers completely prevented the home page from loading at all.

    Second, when I allowed the site in my script blocker, it was slow as hell to load.

    But Third, and more to the point: EFF's Panopticlick has been around for a long time now, and it's far better.

    1. Re:MEH by esldude · · Score: 1

      Hey Panopticlick says my browser is unique among the 4 million plus tested. So there you have it. I am unique, just like everyone else.

    2. Re:MEH by Jane+Q.+Public · · Score: 1

      Yes, you're unique like everyone else... but you are unique TO everyone else... you show up as uniquely you. And that is the important point.

    3. Re:MEH by Anonymous Coward · · Score: 0

      So like in real life you are identifiable when you move around, but for the most part anonymous to anyone but the stores you shop in and people you have shared information with (aka friends/relatives/etc)? Is you house cloaked in an invisibility shield so the mailman do not know where he is actually delivering the mail? Do you pay in cash and expect the seller to close his eyes so you can keep being anonymous to him? What provisions exist in real life to protect me from being seen by the shopkeeper, remembered as the person who always buy lube, and offered special prices/related items? Why do you expect this online then?

    4. Re:MEH by Coditor · · Score: 1

      I deny access to flash, and now I am unique.

    5. Re:Meh by suutar · · Score: 1

      ... that has used their website so far. They've only got 24000ish data points; I can well believe that at this stage, small correlations result in apparently weird results. Give them a few million samples and I bet that those factors won't make you unique anymore.

    6. Re:MEH by MrL0G1C · · Score: 1

      Actually my uniqueness has changed most times that I've visited Panopticon because the information underlying the fingerprint changes regularly, limiting it's usefulness.

      --
      Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
  6. Not impressed by Tony+Isaac · · Score: 1

    Below are the results I got. Really? So I'm the only person who speaks English, running Chrome on Windows 7, in the Central time zone? If that's enough to identify me, then I'm feeling pretty exposed.

    Google, on the other hand, can probably tell me my life history, with all the data they have on me.

    Yes! (You can be tracked!)
    34.59 % of observed browsers are Chrome, as yours.
    22.54 % of observed browsers are Chrome 39.0, as yours.
    58.71 % of observed browsers run Windows, as yours.
    40.04 % of observed browsers run Windows 7, as yours.
    26.96 % of observed browsers have set "en"as their primary language, as yours.
    1.09 % of observed browsers have UTC-6 as their timezone, as yours.
    You have the only browser out of 11099 with this fingerprint.

    1. Re:Not impressed by FredGauss · · Score: 2

      0.3459*0.2254*0.5871*0.4004*0.2696*0.0109 = 0.00005386 Means about 1/20000 with this combination. Likely true that this is enough for tracking to be useful.

    2. Re:Not impressed by Anonymous Coward · · Score: 0

      kind of a small sample size, don't ya think?

    3. Re:Not impressed by Actually,+I+do+RTFA · · Score: 2

      Well, they claim 1 in 11000, as opposed to 1 in 20000. I question their math. (And yours). You don't get to multiple the liklihood of Chrome and Chrome 39 together, they are highly correlated. See also Windows and Windows 7.

      --
      Your ad here. Ask me how!
    4. Re:Not impressed by arth1 · · Score: 2

      The only thing I found interesting was this:

      Use of AdBlock 49.28%

      But that probably says more about the people who would visit the site than it does of AdBlock users.
      Especially with the sample size so small at is is. https://panopticlick.eff.org/ has a much much higher sample base.

      Other things that could be checked but which aren't include whether the browser allows SSL2, SSL3, TLS1.0, TLS1.1, and what kind of encryption.
      Also, the ballpark speed at which it evaluates Javascript.

    5. Re:Not impressed by Zebai · · Score: 1

      I'm unique as well, however the it gave a list of what items I was unique in Namely the only thing that I did not share with the vast majority of others was the exact nature of my plugin list. The exact version and names of all enabled plugins apparently had a unique configuration..Personally I don't see a need to broadcast my plugin list is there anyway to prevent it?

    6. Re:Not impressed by Anonymous Coward · · Score: 0

      Well, I guess they just started collecting the data and it's Sunday night. I was initially shocked too by similar results..

      Still, I thought it's interesting to see that the more we try to be smart about the privacy settings and choosy about the browser and plugins, the more it makes us "stand out from the crowd" and appear more unique...

      Sounds like Flash and IE with loose settings on Windows7 is the way to go for semi-anonymously browsing the web ;)

    7. Re:Not impressed by Jane+Q.+Public · · Score: 1

      Your list of plugins, as also your installed fonts, are public because sites can use that information to display information to you.

      Was that good design? Probably not. But it was well-intended.

    8. Re:Not impressed by geogob · · Score: 1

      Your understanding of their last statement is mistaken. The 1 over 11099 has nothing to do with the above statistics. It only says that of the 11099 browser tested, there are only 1 with the union of the above elements. How big a set is, is irrelevant when considering its union with one or multiple other sets.

      However, what the statistics do tell you is which of those parameters is more or less common with the ensemble. Eliminating a rarely occurring parameter could move you to a more common set intersection, making you thus less traceable. But deducing the union probability from the set statistics is not trivial, if possible at all without further constraints.

      But I am wondering if 11099 trials can be considered significant in this case. There are looking at 6 or more parameters which have countless possible values.

    9. Re:Not impressed by rudametkin · · Score: 3, Interesting

      Your understanding of their last statement is mistaken. The 1 over 11099 has nothing to do with the above statistics. It only says that of the 11099 browser tested, there are only 1 with the union of the above elements.

      You're spot on, that's exactly what it says.

      How big a set is, is irrelevant when considering its union with one or multiple other sets.

      However, what the statistics do tell you is which of those parameters is more or less common with the ensemble. Eliminating a rarely occurring parameter could move you to a more common set intersection, making you thus less traceable. But deducing the union probability from the set statistics is not trivial, if possible at all without further constraints.

      We're looking into putting in a recommendation system to help users improve their anonymity.

      But I am wondering if 11099 trials can be considered significant in this case. There are looking at 6 or more parameters which have countless possible values.

      It's sufficient for us to do quite a bit of analyses on the data and to possibly implement and provide the recommendation system. The data is however highly skewed towards geeks and towards user's in France (a.k.a french geeks!).

      Disclaimer: a couple of colleagues and I created amiunique.org to get some data to understand fingerprinting better. It's a small student project but we feel there's potential. We were not ready for so many people to take an interest :)

    10. Re:Not impressed by Anonymous Coward · · Score: 0

      Use opensource browser and customize it to send randomized plugin list every time. You will still be unique, but each and every time different unique. You migh also get funny errors because you lie to the server about available plugins.

    11. Re:Not impressed by Anonymous Coward · · Score: 0

      Really? So I'm the only person who speaks English, running Chrome on Windows 7, in the Central time zone? If that's enough to identify me, then I'm feeling pretty exposed.

      Based on these results, we are at least 70% certain that you like Celine Dion, furry porn, and would like to learn this 1 weird trick for losing weight.

    12. Re:Not impressed by SourceFrog · · Score: 1

      You have to click 'Details'.

      --
      My other UID is three digits.
  7. I'm a special snowflake apparently. by Anonymous Coward · · Score: 1

    "Your browser fingerprint appears to be unique among the 4,789,097 tested so far.

    Currently, we estimate that your browser has a fingerprint that conveys at least 22.19 bits of identifying information."

    1. Re:I'm a special snowflake apparently. by arth1 · · Score: 4, Informative

      Fonts seems to be what does it. With many programs coming with extra/special fonts, it quickly narrows the users down based on what they have installed.

      Of course, for fonts that only come as part of a software package but install fonts as system fonts (why?), it also tells remote sites what you have installed, which is an additional privacy concern.

    2. Re:I'm a special snowflake apparently. by passwd · · Score: 2

      I agree that fonts seem to be the worst offender when it comes to browser fingerprinting. Surely browsers shouldn't need to send lists of installed fonts to web servers; a web page should simply list the desired fonts and the browser should decide, based on that, what font to use. Is the current behavior part of a standard? Even if it is, I hope browser makers are planning on stopping this leak.

    3. Re:I'm a special snowflake apparently. by KiloByte · · Score: 3, Interesting

      The problem is not in fonts (on non-embedded there's no such thing as too many good fonts!), but in letting a random webpage poke that deeply into your system.

      The message "No Flash or Java fonts detected" suggests who the culprits are. Flash belongs behind FlashBlock, Java belongs in /dev/null.

      --
      The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
    4. Re:I'm a special snowflake apparently. by Anonymous Coward · · Score: 1

      > Flash belongs behind FlashBlock, Java belongs in /dev/null ...and Javascript belongs in /dev/null too. Any active content can (and does) turn against you and is a trojan from the ads industry.

    5. Re:I'm a special snowflake apparently. by AK+Marc · · Score: 1

      "Your browser fingerprint appears to be unique among the 4,790,922 tested so far.

      Currently, we estimate that your browser has a fingerprint that conveys at least 22.19 bits of identifying information."

      In my case, it was the browser plugins that uniquely identified me.

    6. Re:I'm a special snowflake apparently. by Pieroxy · · Score: 4, Informative

      What are you talking about? Browsers don't send installed fonts list to anybody!

      The detection occurs when in CSS you specify font-family: XYZ. This is going to be displayed in the default font, unless the font XYZ is installed. By analyzing the width of the element you specified the font for (or drawing it into a canvas element) you can distinguish the cases where the font is installed from the case where the default font is used instead.

      Hard to circumvent...

    7. Re:I'm a special snowflake apparently. by Pieroxy · · Score: 4, Informative

      This page will detect the fonts on your system without Java or Flash.

    8. Re:I'm a special snowflake apparently. by KiloByte · · Score: 1

      It did find only 60 out of 221 fonts installed on my system, but that's still good enough for some serious fingerprinting.

      --
      The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
    9. Re:I'm a special snowflake apparently. by Anonymous Coward · · Score: 2, Informative

      With noScript enabled, it show no fonts at all.
      None of the buttons work, either.
      Dunno what you're talking about.

    10. Re:I'm a special snowflake apparently. by HyperQuantum · · Score: 1

      Same here.

      But I wonder why my browser needs to provide details about the plugins I have installed to any website I visit. What kind of legitimate use could that have?

      --
      I am not really here right now.
    11. Re:I'm a special snowflake apparently. by rudametkin · · Score: 4, Interesting

      But I wonder why my browser needs to provide details about the plugins I have installed to any website I visit. What kind of legitimate use could that have?

      Sites recover the plugin list to see if you support whatever content they want to send you. If you don't have a certain plugin the site can fallback to some other way of displaying the information or it can refuse to do anything. For example, trying Flash to diplay a video then falling back to html5.

      Is it useful ?
      Somewhat, albeit less and less with html5. Also, there's many plugins sites don't need to know about, as for example a pdf plugin. Some plugins should be totally transparent because they don't interact with the site.

      Is it bad for anonymity? Yes, it's terrible.

    12. Re:I'm a special snowflake apparently. by wiredlogic · · Score: 2

      Hard to circumvent...

      NoScript takes care of most signature methods including tests for installed fonts.

      --
      I am becoming gerund, destroyer of verbs.
    13. Re:I'm a special snowflake apparently. by Anonymous Coward · · Score: 0

      Hard to circumvent...

      My "default font" could very well be a font that sometimes gets requested. Or even a random font.

    14. Re:I'm a special snowflake apparently. by Monty+Worm · · Score: 1
      Me also. But I'm suspecting that having en-NZ in my http headers bumps my uniqueness up quite a lot.

      Just tried switching that off. I'm still unique, but that brings my uniqueness on the "one in x browsers have this" down from ~15M to well inside 100k

      --
      ... and today's pet project has ... been discarded for lack of time.
    15. Re:I'm a special snowflake apparently. by neurovish · · Score: 2

      "Your browser fingerprint appears to be unique among the 4,789,097 tested so far.

      Currently, we estimate that your browser has a fingerprint that conveys at least 22.19 bits of identifying information."

      Unique amongst the browser's tested. Is there a selection bias amongst people who would check to see if their browser is unique going on? I tried with IE from a generic install of windows 7 and still get the "you appear to be unique" message.

    16. Re:I'm a special snowflake apparently. by neurovish · · Score: 1

      iPhone came back with "one in 252,331 have the same fingerprint as yours". I can't think of a more generic browser signature.

    17. Re:I'm a special snowflake apparently. by Pieroxy · · Score: 1

      Who cares? Whatever your default font is, it doesn't have the same widths of most other fonts, so they can be extracted.

    18. Re:I'm a special snowflake apparently. by Pieroxy · · Score: 2

      NoScript will be disabled on the websites you want to do something with. Those will be able to track you.

    19. Re:I'm a special snowflake apparently. by TheRaven64 · · Score: 1

      It's easy to prevent. The browser should only expose a whitelisted set of system fonts to the web, which would then tell you nothing that wasn't in the user agent string to start with. With the widespread support for Web Open Font Format, it's easy for designers to provide additional fonts if they want to use them. I don't want something random on the web to be rendered in, for example, the Quake font, just because I happen to have it installed - it's almost certainly not what the developers intended, and if it is then they should use a .woff file.

      --
      I am TheRaven on Soylent News
    20. Re:I'm a special snowflake apparently. by TheRaven64 · · Score: 1

      Even without direct enumeration, it's still relatively easy to find. The object / embed tags can be nested for fallback and the resource is only requested if you have that plugin installed. You can provide a load of 1px objects with different nesting and just check in the server which cookies show up in the requests.

      --
      I am TheRaven on Soylent News
    21. Re:I'm a special snowflake apparently. by AK+Marc · · Score: 1

      Most of the plugins don't interact with the content. There's no reason my browser should announce that I have a VoIP client installed that will allow me to place calls from web sites, where the browser (via plug-in) detects a valid phone number. There are others that are similarly obscure or single-use that make it so that you are unique. More interesting to me was that I installed over half the list, but never allowed or setup browser plugins.

    22. Re:I'm a special snowflake apparently. by Pieroxy · · Score: 1

      I, for one, find it nice that I can use all the very nice fonts available on ALL iOS devices without a 100kB payload to my users. Specially for mobile devices where 100kB payload can take quite a while, depending on the network conditions.

      Other platforms will default to other fonts, chosen by me as well.

    23. Re:I'm a special snowflake apparently. by Anonymous Coward · · Score: 0

      Except the site in OPs post uses flash to enumerate the fonts, not CSS. Quoted from the entry on the site "Flash attribute that gives the entire list of fonts installed on the operating system"

    24. Re:I'm a special snowflake apparently. by Pieroxy · · Score: 1

      I know, but you don't need flash (or Java for that matter) to detect fonts in a browser. And the browser doesn't "send" a list of fonts, you have to have dynamic code to list the fonts on the client side.

    25. Re:I'm a special snowflake apparently. by Anonymous Coward · · Score: 0

      Surely browsers shouldn't need to send lists of installed fonts to web servers

      Browsers don't need to send 99% of the stuff they do. There is no legitimate reason a web server needs to know what OS your running unless the script kiddie running the site wants to know if his drive by exploit is going to work or not.

  8. Blending in by Anonymous Coward · · Score: 0

    The next step after being able to block the reporting of tracking data is spoofing it.

  9. The interne cables are tapped... by blahplusplus · · Score: 2

    ... of course they know who you are. You need an IP to send and receive information, just the nature of making a connection leaves a trail all by itself. Next it's not that hard to develop mathematical techniques to analyze text and language in posts since they can analyze that most people have limited memory and interest by nature of them being finite beings and can simply build profiles by simply combining all the little tiny bits of different info into some unique ID if they wanted to.

    The nature of our technology has augmented our ability to see and detect so much it's increasingly difficult to hide anymore. I shudder to think how small cameras are becoming and how they will be all pervasive where it matters. We're basically moving into a "tripwire" society where hidden and not so hidden automated track wherever you go what you do and all that data can be stored, analyzed, etc.

    1. Re:The interne cables are tapped... by epine · · Score: 1

      Next it's not that hard to develop mathematical techniques to analyze text and language in posts ...

      Budget projects much? "Doable" and "easy" are not the same words. I'm guessing one person out of a hundred in the general population could take a reasonable stab at developing such an algorithm, and only one person out of a thousand could be considered a natural talent.

      The first 20% of the work gets you to sqrt(sqrt(7e9)) as your mean perplexity, which is simultaneously impressive and yet not terribly actionable. And then the difficulty curve shoots off into the exponential regime.

  10. http://ip-check.info by Anonymous Coward · · Score: 0

    HTH

  11. Doesn't work whithout JS by Anonymous Coward · · Score: 0

    Without JS it can't even check if cookies are enabled, do not track flag is set, AdBlock is used. Not very impressive

    1. Re:Doesn't work whithout JS by Anonymous Coward · · Score: 0

      > Without JS it can't even check if cookies are enabled,

      Yes, you can. Cookies are part of the HTTP/S protocol.

  12. Fonts make you very identifiable by billstewart · · Score: 4, Interesting

    Standard Mozilla behaviour last time this question came up is to include a list of fonts that your browser can display; I don't know whether other browsers do the same, or if they've changed it, but it's the kind of "feature" that hopelessly breaks your chances of non-uniqueness if you've ever installed fonts.

    My work laptop has a font that's the Official Corporate-Branded font for $DAYJOB's corporate logo. Almost every Windows machine at my company has that (at least, every physical machine and the virtual machines running on the hosted virtual desktop cloud; there may be some lab machines that don't, and maybe some contractors, etc.) You might work for a smaller company that does the same. In my case, I've installed all sorts of other random fonts, either to see what they looked like, or simply because back in the 80s of course you wanted Elvish and Dwarvish fonts on your computer, or because I wanted a better monospaced programming font than the default MS one or Courier New.

    Lots of other things leak information as well (cookies, etc.), but fonts are a quick and dirty way around identifying people who block those.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
    1. Re:Fonts make you very identifiable by Anonymous Coward · · Score: 0

      Relying on local resources like installed fonts is completely unnecessary, at least since the invention of web fonts, so giving scripts a list of installed fonts is nothing but a fingerprint function. Wonder why it's still in there. The only way to avoid most forms of tracking is to turn off Javascript.

    2. Re:Fonts make you very identifiable by phantomfive · · Score: 1

      It really doesn't matter to anyone except people who block cookies (and that's not you, because you're logged in). Those people are so rare, I don't think anyone's using any alternate method to track people. Cookies work well enough for tracking.

      --
      "First they came for the slanderers and i said nothing."
    3. Re:Fonts make you very identifiable by ShieldW0lf · · Score: 2

      Make a script that pseudorandomly removes and replaces obscure fonts if you're that concerned.

      --
      -1 Uncomfortable Truth
    4. Re:Fonts make you very identifiable by Anonymous Coward · · Score: 0

      Make a script that pseudorandomly removes and replaces obscure fonts if you're that concerned.

      Well, the recent "innovation" is for the site to draw into a <canvas> with the font, then upload the image to the server for analysis. (Fonts that aren't installed fall back to Serif or whatever.) You could probably script out the top 1000 most common fonts which would help pin you down.

      Bonus, it can figure out your OS due to font rendering differences, your sub-pixel stripe settings, probably your version of FreeType if you use it and there are subtle differences between the versions, etc. etc.

    5. Re:Fonts make you very identifiable by vux984 · · Score: 3, Insightful

      It seems to me that it would be simpler for Firefox (and other browsers) to just whitelist a default set of fonts and those are the only ones it uses regardless of what might be installed on the system on any site you are trying to limit tracking. (It can allow for web embedded fonts; it just won't load anything but the default set from the system.)

      If MS wanted to do it for IE, they'd just have the non-default font set blocked for the "Internet Zone" and allowed for the "Trusted Zone" which should cover most intranet scenarios where they've got custom fonts.

      I suppose an "exceptions" list could be managed separately as well if was really necessary; or it could be tied to the cookie exceptions list -- which would be logical from a "privacy reasoning" perspective... but counter-intuitive from the "why are local fonts not loading for this site just because i blocked cookies" perspective.

      In any case the upshot is that any given version of any given browser on any given platform will have the same fonts available as any other instance of that version of that browser on that platform -- then "font profiling" adds nothing to the basic platform information they already had.

    6. Re:Fonts make you very identifiable by rudametkin · · Score: 1

      It really doesn't matter to anyone except people who block cookies (and that's not you, because you're logged in). Those people are so rare, I don't think anyone's using any alternate method to track people. Cookies work well enough for tracking.

      Actually there are commercial fingerprinting services. The Cookieless Monster does a good job at analyzing them. Many sites like Google, Twitter, Facebook and others mention the colleciton of "device information" in their privacy policies too.

  13. Numbers Don't Lie, But -- by Anna+Merikin · · Score: 4, Insightful

    Their sample size is 11-thousand. According to my results, 1-in-6 computers are running Linux!

    This is absurd, unscientific to the extreme, fear-mongering.

    In your example, based only on the statistics you provided, there were 11099x0.0109 or 120 people in the central time zone *in their sample*, which is the sample size of UTC-6 users.

    Their data is useless.

    In comparison, https://panopticlick.eff.org/i... has almost 5-million in their database. This is somewhat more helpful.

    1. Re:Numbers Don't Lie, But -- by Jane+Q.+Public · · Score: 2

      Absurd, yes.

      Incorrect, yes.

      Fear-mongering? Very definitely NO.

      As you point out (and as I pointed out elsewhere), Panopticlick is superior. But it paints a far WORSE picture than this site does.

      So, "fear-mongering"? No. False sense of security? Maybe.

    2. Re:Numbers Don't Lie, But -- by rudametkin · · Score: 2

      Their sample size is 11-thousand. According to my results, 1-in-6 computers are running Linux!

      We had to start somewhere. Mostly geeks go to the site anyway, so the data is skewed towards them.

      It started as a small project to understand fingerprinting.So far it's been quite successful for our research purposes :)

      This is absurd, unscientific to the extreme, fear-mongering.

      It's just a site that collects stats and then shows them. It also implements other fingerprinting techniques that other sites do not. How is this unscientific or fear mongering?

      In your example, based only on the statistics you provided, there were 11099x0.0109 or 120 people in the central time zone *in their sample*, which is the sample size of UTC-6 users.

      Their data is useless.

      In comparison, https://panopticlick.eff.org/i... has almost 5-million in their database. This is somewhat more helpful.

      As said before, we needed to start somewhere, right? It seems people have taken unexpected interest in the site. We'll be improving it little by little.

      Besides, as others have said, panopticlick paints a far worse picture with more data. Now consider that they fingerprint less attributes than amiunique.

      Disclaimer: my colleagues and I work on, among other things related to fingerprinting, amiunique.org

    3. Re:Numbers Don't Lie, But -- by Anonymous Coward · · Score: 0

      Can we compromise on "false fear of insecurity?"

      In reality, my local newspaper must set a permacookie to limit me to five online visits, as deleting their obvious cookies does not allow me access after five in a month. But changing/deleting a font or two gets me in.

      YMMV

  14. I can be tracked, but still a special snowflake by Anonymous Coward · · Score: 0

    "You have the only browser out of 11325 with this fingerprint."

  15. I don't know that being 1 of 11,776 is "unique" by jockm · · Score: 1

    According to that site "[I] Can Be Tracked!" because my fingerprint is the same as 11,775 others. That number seems to be generated only by people visiting the site meaning the pool would most likely be larger.

    Obviously Browser Fingerprinting is a real thing, but that site seems to be geared toward hyperbole than actually educating.

    --

    What do you know I wrote a novel
  16. Why don't browsers clean it up? by tlhIngan · · Score: 4, Interesting

    GIven most of the data is what's reported by a browser, why don't browsers filter the data?

    Especially if "Do Not Track" is set to on - why don't they limit the data to send back?

    Fonts - Microsoft released 6 fonts for the web over a decade ago - just report those 6 across all platforms and maybe a few standard system ones (you can get this from the User-Agent anyways). Make it whitelist of fonts.

    Sure, some data is gathered through plugins, but I thought many are now click-to-run so you can't get that data unless you specifically run those plugins.

    Is there a reason why browsers like Firefox return everything?

    1. Re: Why don't browsers clean it up? by Anonymous Coward · · Score: 0

      What do you have to hide?

    2. Re:Why don't browsers clean it up? by arth1 · · Score: 1

      Especially if "Do Not Track" is set to on - why don't they limit the data to send back?

      You have misunderstood what "Do Not Track" means.

      It turns on a flag always telling remote websites "this user does not want to be tracked". It has nothing to do with telling your browser to change its behavior, it gives remote sites a piece of information about your wishes.

      Whoever came up with the idea was a dumb shit, and whoever let it become implemented as a browser option was even dumber - it was blindingly obvious from the star that in real life, it's just sending the remote site one more bit of information they can use to track users with.

      Even worse was the idiot who decided to make it default in some browsers. That changes the request from "This user has chosen to ask you to please do not track him", which conceivably a few sites might choose to honor, to "This user has not changed his defaults for this setting", which pretty much ensures that it won't be honored. As it is, it's a waste of a few bytes of transmission.

    3. Re: Why don't browsers clean it up? by Anonymous Coward · · Score: 1

      Wrong question - What does he have to share?

    4. Re:Why don't browsers clean it up? by phantomfive · · Score: 1

      GIven most of the data is what's reported by a browser, why don't browsers filter the data?

      Google won't do it in Chrome because they want to track you. They threatened to not respect the 'Do Not Track' flag if any browser enabled it by default.

      --
      "First they came for the slanderers and i said nothing."
    5. Re:Why don't browsers clean it up? by grep+-v+'.*'+* · · Score: 1

      Is there a reason why browsers like Firefox return everything?

      "All the better to track you with, my dear..." -- the NSA

      (... aka The Big Bad Wolf. And do you really think your house of bricks is that opaque?)

      --
      If the universe is someone's simulation -- does that mean the stars are just stuck pixels?
    6. Re:Why don't browsers clean it up? by Anonymous Coward · · Score: 0

      Fonts - Microsoft released 6 fonts for the web over a decade ago - just report those 6 across all platforms and maybe a few standard system ones (you can get this from the User-Agent anyways). Make it whitelist of fonts.

      A whitelist can only get you so far.

      For the top 1000 fonts, they can draw a sample into a <canvas> and upload the results to the server for analysis. If you don't have the font installed, it falls back to Serif. If you do, it's added to your fingerprint profile.

    7. Re:Why don't browsers clean it up? by Anonymous Coward · · Score: 0

      "Do not track" is as useful as the evil bit. Ever been mugged and said to the mugger "You could mug me, but what about not mugging me?".
      I do not believe for one second that those who track you will stop because of this flag - without a consequence to those who break the rule, it will be ignored except when it makes for good PR to bring it up.

    8. Re:Why don't browsers clean it up? by ledow · · Score: 1

      Most of it isn't "reported" by the browser.

      Most of it is fed to your browser and then your browser regurgitates it as it's expected to.

      If I modify a web server to send only you a random numbered URL, and then watch for that random-numbered URL, I've formed a correlation between your IP and your browser session. If I can get that to tie in with other sites, or give me the slightest hint about those, I can correlate the information.

      If I get your browser to go to a random link, and you have history settings that made visited links a different colour, I can use Javascript to distinguish sites you've been on from sites you haven't. This is how this site's predecessor worked. If you take away that functionality, it breaks some Javascript theming where it tries to pick a suitable background colour given what your link colour is, etc.

      It's not that your browser is deliberately advertising this stuff. It's having its features used to do correlation attacks that NO browser is designed to combat. If your browser refused this stuff, or worked in the perfect way you describe, then it would be a pain in the butt to use and sites would appear broken for no reason.

      Do you even realise how many sites use custom fonts nowadays? I didn't until my browser broke on custom fonts and replaced then with random fonts. Damn the Internet can look ugly when that happens nowadays.

      Plugins are the least of your worries. And any sensible browser will disable by default and force you to "press play" to enable any plugin of interest. And Do Not Track is an absolute waste of time, given that it's not at all binding and the web is international. You might as well set the "This is not spam" flag on every genuine email and configure your email client to believe it absolutely. I'd give it a week before you got spam that advertised as "This is not spam".

      The data reported is reported because it's necessary for basic website rendering and things like Javascript compliance. Sure, you can fake bits of it, but even a browser ignoring certain HTML tags, or rendering one pixel different to another, is information that can be used against you. Have you not seen the Acid Tests? Failing just one of those would be enough to craft a test that it's actually your browser doing that. Apply the same kind of logic to the standardised programming languages in every browser and guess at a handful of sites you might have used and you have a tool that can identify your history from what your browser MUST give back for sites to work.

    9. Re:Why don't browsers clean it up? by careysub · · Score: 1

      Especially if "Do Not Track" is set to on - why don't they limit the data to send back?

      You have misunderstood what "Do Not Track" means.

      No, I don't think he did. He was suggesting that browsers truly act on that option selection in a useful way. You misunderstood his post.

      --
      Starships were meant to fly, Hands up and touch the sky - Nicky Minaj
    10. Re:Why don't browsers clean it up? by SourceFrog · · Score: 1

      Because the info sent is used by some sites to determine how to deliver content to you ... and when several websites stop working in the latest browser, the users will be the first to say 'what a crappy browser, I'm going to use a different browser'.

      --
      My other UID is three digits.
    11. Re:Why don't browsers clean it up? by SourceFrog · · Score: 1

      Actually, Google are decidedly fearful of DNT being on by default, because unlike muggers, they have to obey the law - they can't actually willfully violate expressed user preference without risking a major class action of sorts. That's why they fought so hard to effectively kill any hope of DNT being useful (remember, they were part of the standards committee for standardizing it - the wolf guarding the henhouse).

      --
      My other UID is three digits.
    12. Re:Why don't browsers clean it up? by arth1 · · Score: 2

      No, I don't think he did. He was suggesting that browsers truly act on that option selection in a useful way. You misunderstood his post.

      The Do Not Track option is defined in the RFC draft as not doing anything except sending the DNT: 1 header to a remote server. Having it do more goes against the specification.
      Of course, browsers can implement other functionality to thwart tracking, but not as part of Do Not Track, which has a very specific meaning.

  17. You're more unique than stated! by Anonymous Coward · · Score: 0

    https://panopticlick.eff.org/ says my browser alone provides 15.87 bits of identifying information, but my browser is rather mainstream (Safari 8.0.2). The site says my total browser fingerprint conveys "at least 22.19 bits", but the vast majority (15.87 bits) came from Safari 8.0.2. The likely reason Safari is said to provide so much discrimination is that https://panopticlick.eff.org/ has been tallying web browsers for years but Safari 8.0.2 was an update provided just a few days ago. In the scheme of things, Safari 8.0.2 isn't nearly so unique and will appear more mainstream over time, before being phased out by the next Safari update. I would suggest panopticlick needs to programmed to use an (approximate) distribution of browser versions for the current date.

  18. Mere metadata by phantomfive · · Score: 1

    Metadata completely recognizes a user. It's better than this thing.

    --
    "First they came for the slanderers and i said nothing."
  19. uh oh by Snotnose · · Score: 1

    Somebody took that link out back and fed it a fist full of Valium. It's not dead, but it's comatose.

  20. Hello, I'm snotnose by Snotnose · · Score: 1

    I have the same nick/password on several sites. Including, but not limited to, /., soylentnews, fark, ultimate-guitar, ars-technica, a couple dating sites, a gay dating site, a site dedicated to midget transvestites, and petitions.whitehouse.gov. Feel free to track me.

    Dang, I should change the latter. Some of the petitions I sign could be embarrassing.

    That said, I assume the original article meant something more subtle. I wouldn't know, the link is dead to me.

    1. Re:Hello, I'm snotnose by Anonymous Coward · · Score: 2, Interesting

      It's not the excessive tracking you should be afraid of. What you should worry about is the usage of incomplete data.
      As has been covered on slashdot before NSA kills people based on metadata

      Now add that together with some accidental killing of a person with the same name

      A Reprieve team investigating on the ground in Pakistan turned up what it believes to be a confirmed case of mistaken identity. Someone with the same name as a terror suspect on the Obama administration’s “kill list” was killed on the third attempt by US drones.

      What this tells me is that what I really should worry about is to accidentally having metadata that correlates with someone that the government wants dead.

  21. Not even close to state of the art by Anonymous Coward · · Score: 0

    It's not using WebGL which has tons of device dependent data and on Chrome even has which GPU / Driver you're using

  22. I admit it: I'm a car and a database by dbIII · · Score: 1

    They've got me:
    http://en.wikipedia.org/wiki/A...
    http://en.wikipedia.org/wiki/XBase

  23. Apple is more anonymous by Anonymous Coward · · Score: 1

    I just tried https://panopticlick.eff.org on my iPad and Windows PCs. The Windows PC was uniquely identifiable with Firefox or IE but the iPad came out as 1 in 24 million. Looks like there is an advantage to Apple's locked down standardised platform.

    1. Re:Apple is more anonymous by meta-monkey · · Score: 1

      But since your iPad is freely accepting cookies and blocking no ads or anything else, you're just as trackable by traditional methods. Damned if you do...

      --
      We don't have a state-run media we have a media-run state.
  24. One thing I noticed by bjs555 · · Score: 1

    Yes, like many, my result was "Unique". I noticed that one item being measured was browser resolution. Since I was running my browser at less than full screen and the exact window size is a low entropy parameter, I decided to try again after maximizing my browser window. As expected, the result was a lower uniqueness score. That led me to wonder if some technique like modifying the exact size of the browser window by a few pixels each time it's refreshed might help somewhat to hide from these evil trackers. Perhaps modifying other parameters like which extensions are enabled or what fonts are installed on each refresh might confuse them even more.

  25. 9% of browsers using NoScript by evanh · · Score: 1

    ... or something equivalent like disabled scripting.

    It does give usefull feedback at least. :)

  26. use the blender extension to blend in by Anonymous Coward · · Score: 0

    if you are a firefox user you can install this addon to fake the info collected

    https://addons.mozilla.org/en-us/firefox/addon/blender-1/

  27. Nope. by Anonymous Coward · · Score: 0

    Why does it share any meta data at all.

  28. Currently impossible to stop by bradley13 · · Score: 2

    As others have noted, the EFF Panopticlick is the better service.

    I just spent far too much time playing around with this, on an extended lunch break. I note the following things:

    - You had better disable explicit tracking services (Ghostery), or it all doesn't matter anyway.

    - Fonts are a big factor. Fonts are identified through Flash. There is a configuration file "mms.cfg" that can disable this. The location of this file depends on your operating system and on your browser - it took me a good half-hour to find it for my particular configuration.

    - However, even after disabling fonts, and even using a "user-agent switcher" to look like a Windows/Chrome combination (instead of Linux/Chrome), I was still uniquely identifiable. The biggest factor were my language preferences, the list of plugins, and the precise browser version. Refusing to report system fonts was also pretty important :-/

    In short, there's not much way around it - if you include other information available, like your IP address, you will be uniquely identifiable, and trackable across websites.

    What is missing from this picture: Browsers provide an "incognito" mode. This mode needs to be extended to provide only absolutely essential information to the server. The server needs to know roughly what level of standards support you have (e.g., "Mozilla/5.0"), and what language to send content in (one language, not a list with weights). Everything else could be omitted, and virtually all websites would work perfectly.

    Go a step farther and disable JavaScript in incognito mode, to prevent explicit sniffing. That will disable more websites, but if those sites start losing traffic, they'll offer versions that don't require JS.

    --
    Enjoy life! This is not a dress rehearsal.
  29. Not easily by ArcadeMan · · Score: 0

    I AM SPARTACUS!

     

  30. AdBlock's useless by Anonymous Coward · · Score: 0

    Native browser methods allow detection of adblock. ClarityRay does that. It nullifies AdBlock (and adblock's done a great job at that itself being paid off to NOT DO ITS JOB by default in fact, by advertisers).

    A better option? Right here (custom hosts files you have total easy control over vs. regex work or dns rules tables etc. locally) -> http://yro.slashdot.org/commen...

    APK

    P.S.=> Hosts work and do TONS of things that adblock never could for more speed, security, reliability, & more vs. more types of threats online by far... apk

    1. Re:AdBlock's useless by arth1 · · Score: 1

      Pray tell us how to use hosts files through a proxy server.
      It's the proxy server that looks up the host names, not your local resolver.

      Also, how well does it work with wildcards? There are ad companies that use thousands of random hosts, of the form 47db.adcompany.com, 1a74.adcompany.com, 357f.adcompany.com. With a hosts file, you have to fill out every single possible entry ahead of time, because it doesn't take a wildcard like *.adcompany.com.

      Nor does it block IP addresses. How would you use a hosts file to block http://61.174.51.194/ ?

      Never mind that big hosts files slow down the system, because it is traversed linearly, not through a hash like better resolve (and blocking) mechanisms.

      Using hosts files was viable up until the late 80s, but now it is a joke.

  31. 19771 & counting... apk by Anonymous Coward · · Score: 0

    "You have the only browser out of 19771 with this fingerprint."

    APK

    P.S.=> User agent 0.1% "Opera/9.80 (Windows NT 6.1; Win64; x64) Presto/2.12.388 Version/12.17
    Accept 0.92% "text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/webp, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1"
    Connection 17.51% "close"
    Content encoding 61.80% "gzip, deflate"
    Content language 0.19% "en-US,en;q=0.9"
    List of plugins 10.83% "no JS"
    Platform 10.83% "no JS"
    Cookies enabled 10.83% "no JS"
    Do Not Track 10.83% "no JS"
    Timezone 10.83% "no JS"
    Screen resolution 10.83% "no JS"
    Use of local storage 10.83% "no JS"
    Use of session storage 10.83% "no JS"
    Canvas 10.83% "no JS"
    WebGL 10.83% "no JS"
    List of fonts 10.83% "no JS"
    Screen resolution 10.83% "no JS"
    Language 10.83% "no JS"
    Platform 10.83% "no JS"
    Use of AdBlock 10.83% "no JS"

    (NOTE: Especially the LAST ONE, since native browser methods allow detection of plugins like "Almost ALL Ads Blocked" (crippled by default as it is NOT doing its job since it sold out to advertisers & horribly inefficient on RAM + CPU) - So, in lieu of that? Well, I opted to create my OWN solution using something you already have natively built into the IP stack itself, in custom hosts files, that does more by far & far more efficiently for users for added speed, security, reliability, & even anonymity online -> http://yro.slashdot.org/commen... & it works, better than ANY other *SINGLE* solution by itself, bar-none... )

    ... apk

  32. Ghostery & AdBlock = Inferior + 'Souled-out' by Anonymous Coward · · Score: 0

    A FREE hosts program adds speed, security, & reliability, doing more, more efficiently vs. addons + fixes DNS' redirect security issues:

    APK Hosts File Engine 9.0++ 32/64-bit:

    http://start64.com/index.php?o...

    ---

    A.) Hosts do more than:

    1.) AdBlock ("souled-out" 2 Google/Crippled by default http://techcrunch.com/2013/07/... )
    2.) Ghostery (Advertiser owned) - "Fox guards henhouse" http://en.wikipedia.org/wiki/G...
    3.) Request Policy -> http://yro.slashdot.org/commen...

    B.) Hosts add reliability vs. downed/redirected dns (& overcome site redirects e.g. /. beta).

    C.) Hosts secure vs. malicious domains too -> http://tech.slashdot.org/comme... w/ less "moving parts" complexity

    D.) Hosts files yield more:

    1.) Speed (adblock & hardcodes fav sites - faster than remote dns)
    2.) Security (vs. malicious domains serving malcontent + block spam/phish & trackers)
    3.) Reliability (vs. downed or Kaminsky redirect vulnerable dns, 99% = unpatched vs. it & worst @ isp level + weak vs DGA, & Fastflux + dynDNS botnets)
    4.) Anonymity (vs. dns request logs + dnsbl's).

    ---

    * Hosts do more w/ less (1 file) @ faster levels (ring 0) vs redundant inefficient addons (slowing slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ os, & 1st net resolver queried w\ 45++ yrs.of optimization).
    * Addons = more complex + slow browsers in messagepassing (use a few concurrently & see) & are nullified by native browser methods - It's how Clarityray's destroying Adblock.
    * Addons slowup slower usermode browsers layering on more - & bloat RAM consumption + excessive cpu use too (4++gb extra in FireFox https://blog.mozilla.org/nneth...)

    Instead, work w/ a more capable native kernelmode part you already have - hosts (An integrated part of the ip stack)

    APK

    P.S.=> "The premise is quite simple: Take something designed by nature & reprogram it to make it work for the body rather than against it..." - Dr. Alice Krippen: "I am legend"

    ...apk

  33. Ask yourselves these questions... apk by Anonymous Coward · · Score: 0

    Can adblock or ghostery do 15 things hosts files can for more speed, security, & reliability:

    1.) Secure you vs. known malicious sites/servers (beyond malicious adbanners - see 2 thru 6 below next)
    2.) Secure you vs. downed DNS servers aiding reliability
    3.) Secure you vs. DNS redirect poisoned dns servers
    4.) Protect you vs. fastflux using botnet attacks and stop their communications back to their C&C servers
    5.) Protect you vs. dynamic dns using botnet attacks and stop their communications back to their C&C servers
    6.) Protect you vs. domain generation algorithm using botnet attacks and stop their communications back to their C&C servers
    7.) Speed you up for websurfing not only by adblocking but also hardcoding favorite sites
    8.) Get you past a dnsbl you may not agree with
    9.) Keep you off dns request logs
    10.) Do all of those things and block ads (better than adblock) more efficiently in cpu cycles and memory usage
    11.) Work on ANY webbound application (think stand-alone email programs, for example).
    12.) Give you direct, easily notepad/texteditor controlled data for all of the above
    13.) Block out trackers
    14.) Block spam mails sources
    15.) Block phishing mails sources

    "?"

    * Simple YES or NO answers will do for repliers to this - that's all.

    APK

    P.S.=> The ANSWER ="NO" to each enumerated item above as far as "Almost ALL Ads Blocked" (crippled by default & 'souled-out' defeating it's very base purpose) is concerned -> http://techcrunch.com/2013/07/...

    So, *IF* you feel like doing things LESS efficiently as well -> https://blog.mozilla.org/nneth... ontop of doing less than hosts do (by far) with more complexity + from a slower mode of operations (usermode with more messagepassing overheads vs. hosts in kernelmode, also starting up w/ the IP stack itself, before REDUNDANT inefficient addons even BEGIN to operate, & as the 1st resolver queried by the OS as well)?

    That's illogical: I can lead a horse to water, but I can't make them drink!

    ... apk/b

    1. Re:Ask yourselves these questions... apk by ledow · · Score: 1

      Seriously, this guy is still doing the rounds?

      Come back when the advertisers have all moved onto the same CDN's as everyone else and you can't block by IP.

      The rest? Well, apart from the utter bullshit, it's called a DNS proxy.

    2. Re:Ask yourselves these questions... apk by Anonymous Coward · · Score: 0

      I would too when you can't prove him wrong on hosts. DNS uses more power, cpu, ram & other resources (especially if setup as a separate machine) = stupid too. Firewall rules and hosts files seem to be a more efficient ticket using what you already have instead of stupidly bolting on more complexity and room for breakdown or exploit.

  34. My mother will be so disappointed. by jpellino · · Score: 1

    Turns out I'm only one in 22,473. Maybe if I switch to Firefox I can once again be 1 in a million...

    --
    "Win treats sysadmins better than users. Mac treats users better than sysadmins. Linux treats everyone like sysadmins."
  35. Meh by argStyopa · · Score: 1

    First, the flippant comment:
    I find it astonishing that in this day and age when apparently they can track everything I do, want, and own online without my permission, my ATM still asks me WHAT LANGUAGE I want to use? Seriously? After I've answered that once, it's done. I'm not changing my native language guys. Offering it subsequently is doing a favor only for the foreign-language dude that steals my card.

    Second, the serious one:
    a) the site itself is fairly vague and misleading:
    "Yes! (You can be tracked!)
    36.34 % of observed browsers are Chrome, as yours.
    27.11 % of observed browsers are Chrome 39.0, as yours.
    55.61 % of observed browsers run Windows, as yours.
    39.77 % of observed browsers run Windows 7, as yours.
    59.03 % of observed browsers have set "en"as their primary language, as yours.
    5.51 % of observed browsers have UTC-6 as their timezone, as yours.
    You have the only browser out of 24041 with this fingerprint."
    I call bullshit on that. You're telling me I'm the only english-language individual running chrome on windows 7 in the UTC-6 timezone? Absolute nonsense.

    b) when you pull the 'more details" then it starts to get more plausible, where the specific list of addons I use is rather unique, but they go down to asserting that my browser is 'identifiable' due to WebGL output - really, are vendors doing this to fingerprint my browser (as is implied) or is this more of a forensic "if I was stupid enough to send a ransom note from my browser, the FBI could eventually confirm that it came from my machine if they had physical possession of it and some weeks"?
    That's two different contexts of "unique", surely?

    --
    -Styopa
  36. Privoxy iirc, & the rest of your "points"? by Anonymous Coward · · Score: 0

    See subject-line: *IF* you MUST use a proxy? That allows for hosts...

    As far as new entries for hosts for sites that are either ads or known bad in some form? The security community provides them as they are VERIFIED bad (not just speculation), & I provide the automation for the rest -> http://start64.com/index.php?o...

    * Hosts SPEED UP the system by:

    Blocking out malware/malscripted sites.
    Blocking out Known sites-servers/hosts-domains that are known to serve up malware (especially "fastflux" types, the predominant design that uses host-domain names vs. IP addresses (far easier to 'kill' in the latter is why)).
    Blocking out Bogus DNS servers malware makers use (via fastflux + rogue DNS servers).
    Blocking out Botnet C&C servers.
    Blocking out Bogus adbanners that are full of malicious script content for security, & regular ones for more bandwidth.
    Blocking out known PHISHERS.
    Blocking out TRACKERS.
    Blocking out SPAMMERS.
    Getting you back speed/bandwidth you paid for by blocking out adbanners + hardcoding in your favorite sites (faster than remote DNS server resolution).
    Added reliability AND SPEED via hardcoded favorite sites (vs. downed or misdirect/poisoned DNS servers - since most are NOT patched vs. the Kaminsky flaw).
    Custom hosts files work on ANY & ALL webbound apps (browser plugins do not).
    Custom hosts files offer a better, faster, more efficient way, & safer way to surf the web & are COMPLETELY controlled by the end-user of them.

    APK

    P.S.=> And, "There ya go" - Hosts do FAR MORE for added speed, security, & reliability than adblock or ghostery (even local DNS) for less RAM + CPU used & from a faster level of operations in kernelmode (vs. layering on more messagepassing overheads into an already SLOWER usermode browser) -> http://yro.slashdot.org/commen... & you're welcome to *TRY* to disprove those points (good luck, you'll need a miracle)... apk

    1. Re:Privoxy iirc, & the rest of your "points"? by arth1 · · Score: 1

      No, Privoxy won't help if you have to go through an external proxy. You know, one that you don't have control over, but where work can log who visited what pages. Work, like what you don't have because you're a kook and unemployable.

      With a remote proxy, no local resolving takes place at all (other than the address of the proxy server). No matter what hosts tables you have set up on your local machine doesn't matter because the resolving doesn't happen on your machine at all.

      Adblock works great, because it filters before you send a request. Neither the resolving nor the request goes anywhere.
      Of course, it can filter IPs and wildcards too, unlike a dumb hosts table.

  37. Can "AlmostALLAdsBlocked" do this? by Anonymous Coward · · Score: 0

    That hosts can for more speed, security, reliability, & more:

    1.) Secure you vs. known malicious sites/servers (beyond malicious adbanners - see 2 thru 6 below next)
    2.) Secure you vs. downed DNS servers aiding reliability
    3.) Secure you vs. DNS redirect poisoned dns servers
    4.) Protect you vs. fastflux using botnet attacks and stop their communications back to their C&C servers
    5.) Protect you vs. dynamic dns using botnet attacks and stop their communications back to their C&C servers
    6.) Protect you vs. domain generation algorithm using botnet attacks and stop their communications back to their C&C servers
    7.) Speed you up for websurfing not only by adblocking but also hardcoding favorite sites
    8.) Get you past a dnsbl you may not agree with
    9.) Keep you off dns request logs
    10.) Do all of those things and block ads (better than adblock) more efficiently in cpu cycles and memory usage
    11.) Work on ANY webbound application (think stand-alone email programs, for example).
    12.) Give you direct, easily notepad/texteditor controlled data for all of the above
    13.) Block out trackers
    14.) Block spam mails sources
    15.) Block phishing mails sources

    "?"

    * Simple YES or NO answers will do for repliers to this - that's all.

    APK

    P.S.=> The ANSWER ="NO" to each enumerated item above as far as "Almost ALL Ads Blocked" (crippled by default & 'souled-out' defeating it's very base purpose) is concerned -> http://techcrunch.com/2013/07/...

    So, *IF* you feel like doing things LESS efficiently as well -> https://blog.mozilla.org/nneth... ontop of doing less than hosts do (by far) with more complexity + from a slower mode of operations (usermode with more messagepassing overheads vs. hosts in kernelmode, also starting up w/ the IP stack itself, before REDUNDANT inefficient addons even BEGIN to operate, & as the 1st resolver queried by the OS as well)?

    That's illogical: I can lead a horse to water, but I can't make them drink!

    ... apk

    1. Re:Can "AlmostALLAdsBlocked" do this? by arth1 · · Score: 1

      The answer is NO to all of the above, because I have to go through a proxy.

  38. Re:Hosts maintenance = automated... apk by Alrescha · · Score: 1

    "YOU WOULD HAVE TO WHITELIST TO ACCESS THEM @ ALL (you're talking a practically never ending battle there))."

    For the love of Pete, did you not read my original post?

    For casual exceptions to the whitelist you use a free filtering proxy. My example was Startpage.com/ix-quick. You don't need to update your whitelist except for sites that you have an ongoing relationship with.

    Once again, I *do* this. It's mostly a set-and-forget. And the great thing about it is that if some new tracker/adfarm thing comes along I don't have to do anything about it - it's already filtered.

    A.

    --
    ...bringing you cynical quips since 1998
  39. Things to make browsers less unique by billstewart · · Score: 1

    I already ranted about fonts, but amiunique decided that my browser version (the one supported my the IT department at work) and time zone (UTF-8) and language (en-US) were enough to get uniqueness. Apparently everybody on the West Coast are running newer browsers :-)

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  40. Re:Proxies slow you down... apk by Alrescha · · Score: 1

    Sorry, not chasing your moving goalposts. Use the solution that works for you - I do.

    A.

    --
    ...bringing you cynical quips since 1998
  41. Mod Parent Up Please by billstewart · · Score: 1

    Yup, that's the right thing to do.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  42. This is cool by waspleg · · Score: 1

    But,

    Are you unique?
    Yes! (You can be tracked!)

    47.07 % of observed browsers are Firefox, as yours.

    3.74 % of observed browsers are Firefox 31.0, as yours.

    19.73 % of observed browsers run Linux, as yours.

    62.02 % of observed browsers have set "en"as their primary language, as yours.

    15.47 % of observed browsers have UTC-5 as their timezone, as yours.

    You have the only browser out of 26601 with this fingerprint.

    Okay. Now what? Also 26601 "browsers" doesn't sound like a lot when you're talking about potential billions. Not a big sample. But what do you do now? I have my browser set to remember nothing, so you can't really track cookies across sites well or whatever.

  43. For the most comprehensive hosts file? by Anonymous Coward · · Score: 0

    I created APK Hosts File Engine 9.0++ 32/64-bit -> http://start64.com/index.php?o... to do the MOST comprehensive job possible (populating my custom hosts file from 12 reputable & reliable sources in the security community for that data) vs. botnets, malicious script housing sites, servers serving up malware, ad banner blocking (to get my speed/bandwidth I paid for back & to protect myself vs. maliciously scripted ads, trackers, phish/spam payloads, of which since 2004 there have been TONS), etc. - et al.

    To stop IP Address based attacks & tracking etc. (vs. domain-subdomain names that hosts uses, by far the most used vs. ip addresses due to fastflux &/or dynamic DNS using botnets, which use host-domain names to skirt by firewalls by changing IP addresses on domain/host names)?

    I did a firewall ruleset for Windows -> hhttp://yro.slashdot.org/comments.pl?sid=5117369&cid=46916145 to shear away trackers & such that you DON'T see (like you do ads for instance).

    * It works... evidently, SO WELL, that someone couldn't disprove my points validly in this exchange & downmodded this same post, both here http://yro.slashdot.org/commen... AND HERE too http://yro.slashdot.org/commen... which says WORLDS on the validly & strength of this post (as well as hosts combined with firewalls).

    APK

    P.S.=> I use another tool by NIRSOFT to monitor these things: Network Latency Viewer, which does the same thing (it was useful for populating that firewall rules list in the 2nd link above). In the end - Good choices on your part by-the-by, & "Great Minds Think Alike"... apk

  44. PROXIES SLOW YOU DOWN... apk by Anonymous Coward · · Score: 0

    I countered your points validly, point-by-point, here http://yro.slashdot.org/commen... that's not "moving goalposts" as you accused me of falsely either - it's scoring SO WELL on MY end, you can't compete.

    My point on PRIVOXY (which can use hosts with itself & is a proxy) surprise you here http://yro.slashdot.org/commen... ?

    Don't let it: I've taken on 1000's on hosts vs. browser addons, DNS, etc. & I've never, EVER, been caught "short-handed" being unable to show weaknesses in them vs. hosts + firewalls (using what you already have that works with less moving parts complexity added on, & less resources consumed too).

    LASTLY: Downmodding my posts MINUS VALID JUSTIFICATIONS (like proving me wrong) isn't helping your case here http://yro.slashdot.org/commen... or herehttp://yro.slashdot.org/comments.pl?sid=6395793&cid=48601443 and here http://yro.slashdot.org/commen... AND HERE TOO http://yro.slashdot.org/commen... either (& don't even *TRY* tell me "it can't be done" - it's easy to do with multiple registered account sockpuppets here on /. especially - goes on like mad here).

    APK

    P.S.=> However - I'll agree, to each his own (my "own" just happens to be more efficient & does more for you, WITH LESS resources consumed, no less - using what you already have natively, with less chance for breakdown/exploit, & complexity)... apk

  45. Uniqifying elements by userw014 · · Score: 1

    On a Ubuntu 14.04 install, Chrome's most unique component was WebGL. On a Macbook Pro (Mavericks), it was the list of plugins, followed by the font list. For both, the Canvas was shared with less than 1%

    Curiously, Do Not Track is reported as "yes" for Ubuntu, but "1" for Safari.

  46. I am legion by sgunhouse · · Score: 1

    Seems to be up, finally.

    Of course I am unique from their sample, I used an unreleased test version of a browser - I had to be unique. However, that version of tracking is useless as I have ... 7 different versions of browsers on my system, they would not know they were the same person on the same computer. (And I have 3 other computers plus a couple of tablets.)

    Does that mean I am, what, 40 different people according to them?

  47. Honeypot by Guy+From+V · · Score: 1

    See Comment Subject.

  48. Says I Can be Tracked by sudon't · · Score: 1

    But most of my "uniqueness" seems to be about the fact that I'm a Mac user, using Safari. They also extracted a lot of fonts. What I wonder is, how useful is this information if I'm blocking ads and trackers, tossing cookies regularly, and using a VPN? To whom would it be useful?

    (I'm not being rhetorical)

    --
    -- sudon't

    Air-ride Equipped

  49. not so state of the art by Anonymous Coward · · Score: 0

    Maybe not, this site claims I'm one in 33K, while Panopticon marks me as one in 5M. Both report the list of plugins as most identifying and the only difference I see in the reported data is that Panopticon also lists all the old Java plugins.

  50. AdBlock can't do as much as hosts can by Anonymous Coward · · Score: 0

    For more speed, security, & reliability if you go thru a proxy or not.

    * There IS privoxy though - it is a proxy system that works WITH hosts files (you're using the wrong proxy apparently, forcing you into inferior CRIPPLED BY DEFAULT "solutions" like "AlmostALLAdsBlocked" that can't do 1/15th as much as hosts do for added speed, security, & reliability).

    APK

    P.S.=> Period (& you KNOW it, as I know it, as does anyone reading, seeing you can't validly prove my points on that much wrong here -> http://yro.slashdot.org/commen... )... apk

    1. Re:AdBlock can't do as much as hosts can by arth1 · · Score: 1

      Please explain how hosts entries would block:

      - Any host on the 123.64.0.0/11 network.
      - Any host that ends with .2o7.net regardless of hostname[*].
      - Requests that embed a hostname or IP address in the URL

      [*]: You are aware that some trackers use pseudo-random hostnames that are resolved through wildcard DNS entries, right? That way they can track exactly where you came from too, because the hostname will be unique for just you.

      All you have to do is give examples that do the above. It's you who claim hosts files are the panacea - the burden of proof is on you, not others.
      Put up or shut up.

  51. Explain why adblock's weak by Anonymous Coward · · Score: 0

    Compared to hosts in a 15++:1 ratio favoring hosts here http://yro.slashdot.org/commen... - all you have to do is show adblock doing more for added speed, security, reliability, & even anonymity to an extent - that's all: FUNNY YOU CAN'T MANAGE THAT, ever... lol!

    Vs. IP based threats/trackers, I use (again) what I already have natively, in firewall rules-> http://yro.slashdot.org/commen...

    IP based threats are far less used, but vs. them firewalls which you already have, do work!

    (Still, hosts take over MOST of it since host-domain names are more used by "bad guys", & hosts work vs. "fastflux" &/or dynamic dns using botnets, which blow by firewalls by changing IP addresses on host-domain names - hence WHY hosts are even more valuable than firewalls).

    I use what I ALREADY NATIVELY HAVBE vs. stupidly "adding on more" that's inefficient as hell, ala adblock eating 100% CPU & 4++gb of RAM -> https://blog.mozilla.org/nneth... & crippled by default, sold out to NOT DO ITS JOB-> http://techcrunch.com/2013/07/...

    * I have put up, you haven't (you still can't prove almostalladsblocked does more than hosts and with less).

    APK

    P.S.=> Fact: hosts do more with less, no questions asked, & you're inability to prove me wrong here http://yro.slashdot.org/commen... proves that easily... apk

  52. LMAO - proxies slow you down stupid by Anonymous Coward · · Score: 0

    See subject & YOU HAVE NO CONTROL OVER THEM (you said it yourself).

    AdBlock can't do as much as hosts can, period http://yro.slashdot.org/commen... or you would've proved my 15++ points in favor of hosts over adblock WRONG by now (& you can't obviously).

    In fact, I've PROVEN (with YOUR HELP no less) that Hosts also do MORE with less (far less than 100% CPU use flooring & 4++ gb of RAM used like "almostALLAdsBlocked" -> https://blog.mozilla.org/nneth... ) & hosts aren't SOLD-OUT TO NOT DO THEIR JOB RIGHT (like Adblock) -> http://techcrunch.com/2013/07/...

    * Unemployable? Chump, I've done things the fool likes of you will *NEVER* manage in this field, so keep working (it's "noble work" you're doing, wageslave: Making others rich while you make peanuts & work 60++ hrs. a week for them to do so, selling your life away, lol!)

    APK

    P.S.=> My money works for ME, making me more money (I haven't HAD to be anyone's wageslave for years now) - I've run my OWN business , successfully, for nearly a decade now (unlike a wageslave like you, lol)... apk

  53. Ghostery = Inferior + 'Souled-Out'... apk by Anonymous Coward · · Score: 0

    A FREE hosts program adds speed, security, & reliability, doing more, more efficiently vs. addons + fixes DNS' redirect security issues:

    APK Hosts File Engine 9.0++ 32/64-bit:

    http://start64.com/index.php?o...

    ---

    A.) Hosts do more than:

    1.) AdBlock ("souled-out" 2 Google/Crippled by default http://techcrunch.com/2013/07/... )
    2.) Ghostery (Advertiser owned) - "Fox guards henhouse" http://en.wikipedia.org/wiki/G...
    3.) Request Policy -> http://yro.slashdot.org/commen...

    B.) Hosts add reliability vs. downed/redirected dns (& overcome site redirects e.g. /. beta).

    C.) Hosts secure vs. malicious domains too -> http://tech.slashdot.org/comme... w/ less "moving parts" complexity

    D.) Hosts files yield more:

    1.) Speed (adblock & hardcodes fav sites - faster than remote dns)
    2.) Security (vs. malicious domains serving malcontent + block spam/phish & trackers)
    3.) Reliability (vs. downed or Kaminsky redirect vulnerable dns, 99% = unpatched vs. it & worst @ isp level + weak vs DGA, & Fastflux + dynDNS botnets)
    4.) Anonymity (vs. dns request logs + dnsbl's).

    ---

    * Hosts do more w/ less (1 file) @ faster levels (ring 0) vs redundant inefficient addons (slowing slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ os, & 1st net resolver queried w\ 45++ yrs.of optimization).
    * Addons = more complex + slow browsers in messagepassing (use a few concurrently & see) & are nullified by native browser methods - It's how Clarityray's destroying Adblock.
    * Addons slowup slower usermode browsers layering on more - & bloat RAM consumption + excessive cpu use too (4++gb extra in FireFox https://blog.mozilla.org/nneth...)

    Instead, work w/ a more capable native kernelmode part you already have - hosts (An integrated part of the ip stack)

    APK

    P.S.=> "The premise is quite simple: Take something designed by nature & reprogram it to make it work for the body rather than against it..." - Dr. Alice Krippen: "I am legend"

    ...apk

  54. Ask yourselves these questions... apk by Anonymous Coward · · Score: 0

    Can Ghostery (advertiser owned) do 15 things hosts files can for more speed, security, reliability, & more:

    1.) Secure you vs. known malicious sites/servers (beyond malicious adbanners - see 2 thru 6 below next)
    2.) Secure you vs. downed DNS servers aiding reliability
    3.) Secure you vs. DNS redirect poisoned dns servers
    4.) Protect you vs. fastflux using botnet attacks and stop their communications back to their C&C servers
    5.) Protect you vs. dynamic dns using botnet attacks and stop their communications back to their C&C servers
    6.) Protect you vs. domain generation algorithm using botnet attacks and stop their communications back to their C&C servers
    7.) Speed you up for websurfing not only by adblocking but also hardcoding favorite sites
    8.) Get you past a dnsbl you may not agree with
    9.) Keep you off dns request logs
    10.) Do all of those things and block ads (better than adblock) more efficiently in cpu cycles and memory usage
    11.) Work on ANY webbound application (think stand-alone email programs, for example).
    12.) Give you direct, easily notepad/texteditor controlled data for all of the above
    13.) Block out trackers
    14.) Block spam mails sources
    15.) Block phishing mails sources

    "?"

    * Simple YES or NO answers will do for repliers to this - that's all.

    APK

    P.S.=> The ANSWER ="NO" to each enumerated item above as far as Ghostery ('souled-out' defeating it's very base purpose) is concerned -> http://en.wikipedia.org/wiki/G...

    So, *IF* you feel like doing less for security, speed, reliability, & even anonymity (ghostery can't touch hosts on all of those) ontop of doing less than hosts do (by far) with more complexity + from a slower mode of operations (usermode with more messagepassing overheads vs. hosts in kernelmode, also starting up w/ the IP stack itself, before REDUNDANT inefficient addons even BEGIN to operate, & as the 1st resolver queried by the OS as well)?

    That's illogical: I can lead a horse to water, but I can't make them drink!

    ... apk

  55. Fucking flash by Anonymous Coward · · Score: 0

    ...throws me under the bus.

    I can install blendin in an attempt to look generic, but fucking cunt flash makes it all meaningless by telling anyone who asks what my real OS is.

    And then there's the fonts, and apparently my timezone. This is the kind of shit that nobody needs to know.