Does Vanadium prevent canvas fingerprinting?

r134a

custardbomb That is interesting in the sense that you have the same canvas fingerprint hash on p6p. The topic here was specifically canvas fingerprinting. That may indicate the canvas fingerprint hash is identical on all GOS devices currently on stable? At least using this specific canvas fingerprint test.

The reason why you have different hashes than the other 3 @Franco provided, is because those are browser fingerprint hashes where timezone, screen resolution, prefered language etc... do have an effect. As gristle-cause pointed out, if fingerprinting is a key element of your threat model, tor browser is likely the best option, however the topic was about canvas fingerprinting specifically, and the claims made about it.

Franco

Thanks for clarifying, indeed, the three other sites I tested are not relevant for Canvas fingerprinting only.

nei

xxx The only solution that works for me is Firefox with CanvasBlocker.

On mobile? Fennec works for me without CanvasBlocker.

r134a i think the intent is it being the same on all vanadium users with same os and device. So i think the answer should be yes, vanadium does prevent canvas fingerprinting.

dawt All pixels of the same model and running the same software should have the same canvas fingerprint.

I feel that's unnecessarily specific. I'd much rather have different, random values fed to the trackers where applicable. No trackers? No problem for any normal use.

xxx

nei On mobile? Fennec works for me without CanvasBlocker.

As far as I know Fennec uses the 'Resist Fingerprinting' setting (as Tor Browser)
https://support.mozilla.org/en-US/kb/resist-fingerprinting
Which breaks some websites.

dawt

nei

That only really works if the fingerprinting script takes takes the randomized result at face value. If it has detection for canvas randomization, then you're also adding information about yourself. There aren't many people using fingerprint spoofers, for instance. And that's the best case, it might be possible to fingerprint the randomization itself to identify what specific canvas spoofer you're using, or bypass the randomization by doing a 100 canvases and averaging the results. In the latter case you end up even more identifiable than if you just used a stock browser.

advokate

canvas hash:
5ed90f76eafeb2ea007b9926f9a62af1
(device: pixel 8
build: 2026012101
vanadium version: 144.0.7559.90.0
seems to be consistent....)

now my 2 cents about canvas hash:
this topic has been discussed to death throughout the last I-don't-know-how-many years
there are millions of opinions and suggestions provided by millions of people and sources
let's assume this scenario:
you are using brave with default block lists. you are identifiable as a "default brave user", including operating system, ip address/internet provider (considering dns leaks), time zone/country/city and some minor, yet (imho) neglectable information. fair enough. adding a vpn means adding a vpn provider. they are changing your ip address, but the ip addresses of all their servers are known. configure some dns filtering with your vpn, adds further uniqueness. same goes for additional blocklists with brave shields. maybe you feel like using some extensions with your browser. be my guest. (btw, unless you don't fetch them directly from the developer, google is involved. this only affects chromium derivatives afaik). speaking of blocklists, why not adding some twitch ad-blockers, especially when never ever watching any twitch content. blocking annoying youtube ads is also handy, but as an aware person you are only using a proxy for youtube, because that's the way to go. feel free to block javascript, who needs that crap anyway? I could go on and on...
long story short: go figure yourself whether you're in need of faking a canvas hash. and how...
and here it goes, my opinion among a million of other opinions (:

advokate

sorry again for double-post, too late to edit

I forgot about mentioning all of us being a bit of a sweet tooth, thus having at least one or two tasty cookies stored in our shelves...

AND:

by "you", I don't mean anybody in particular here, just the general and generic "you" for everybody browsing the web

« Previous Page