How unique is your browser?

[degenerate matter]

Browser fingerprinting is one of the most commonly used methods for tracking your online activity, probably fourth only to personal data, IP addresses and cookies. It is therefore important to consider how much information your browser is (unnecessarily) transmitting to the websites you access.

https://panopticlick.eff.org/

This test will give you a decent idea of what sites can see even when you're just surfing innocuously. Below are results for my standard configurations of the browsers I use. As you can see, even with some effort taken to obfuscate oneself, it's pretty difficult to blend in.

Chromium with ScriptSafe and Vanilla Cookie Manager:



Firefox with NoScript, Cookie Controller, spoofed user agent and HTTP headers, few other tweaks:



FF with javascript enabled:



Tor Browser default config:



Post your results here, I'm particularly interested in how mobile browsers fare.

[RustyShackleford]

1 in 4,637,003 baby. Even though I sometimes change my user agent java script fucks me up. With noscript it goes down to 1/10,000 or so. Apparently there was an extension that would fudge all the details picked up by js, but its no longer maintained. Anyone know of ways to do this?

[theKit]

1 in 4,637,003 baby. Even though I sometimes change my user agent java script fucks me up. With noscript it goes down to 1/10,000 or so. Apparently there was an extension that would fudge all the details picked up by js, but its no longer maintained. Anyone know of ways to do this?

Um... I think you misunderstand how this works. The MORE unique you are, the EASIER it is to track you. You being 1 of everyone else tested means you can back tracked without a shadow of a doubt who you are.

[Umbrella Corp]

Is that right?  Admittedly I don't know much about "computers" in general as I only use mine to browse a couple forums, run google searches, and watch anime/videos these days.

The way my brain interprets it, the more unique you are, the less chance you have to be singled out by mass data mining.  Is this a completely noob way of looking at it?  The FAQ didn't help me much.

[Rodrat]

Browser Characteristic

bits of identifying information

one in x browsers have this value

value

User Agent
13.04

8446.44
Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; rv:11.0) like Gecko
HTTP_ACCEPT Headers
3.99

15.91
text/html, */* gzip, deflate en-US,en;q=0.5
Browser Plugin Details
14.21

18926.92
Plugin 0: Shockwave Flash; Shockwave Flash 15.0 r0; Flash.ocx; (Shockwave Flash; application/x-shockwave-flash; swf) (Shockwave Flash; application/futuresplash; spl). 
Time Zone
4.01

16.09
240
Screen Size and Color Depth
4.4

21.07
1366x768x24
System Fonts
13.28

9972.25
Aharoni, Aldhabi, Andalus, Angsana New, AngsanaUPC, Aparajita, Arabic Transparent, Arabic Typesetting, Arial, Arial Baltic, Arial Black, Arial CE, Arial CYR, Arial Greek, Arial TUR, Batang, BatangChe, Browallia New, BrowalliaUPC, Calibri, Calibri Light, Cambria, Cambria Math, Candara, Comic Sans MS, Consolas, Constantia, Corbel, Cordia New, CordiaUPC, Courier New, Courier New Baltic, Courier New CE, Courier New CYR, Courier New Greek, Courier New TUR, DaunPenh, David, DFKai-SB, DilleniaUPC, DokChampa, Dotum, DotumChe, Ebrima, Estrangelo Edessa, EucrosiaUPC, Euphemia, FangSong, Franklin Gothic Medium, FrankRuehl, FreesiaUPC, Gabriola, Gadugi, Gautami, Georgia, Gisha, Gulim, GulimChe, Gungsuh, GungsuhChe, Impact, IrisUPC, Iskoola Pota, JasmineUPC, Javanese Text, KaiTi, Kalinga, Kartika, Khmer UI, KodchiangUPC, Kokila, Lao UI, Latha, Leelawadee, Leelawadee UI, Leelawadee UI Semilight, Levenim MT, LilyUPC, Lucida Console, Lucida Sans Unicode, Malgun Gothic, Mangal, Marlett, Meiryo, Meiryo UI, Microsoft Himalaya, Microsoft JhengHei, Microsoft JhengHei Light, Microsoft JhengHei UI, Microsoft JhengHei UI Light, Microsoft New Tai Lue, Microsoft PhagsPa, Microsoft Sans Serif, Microsoft Tai Le, Microsoft Uighur, Microsoft YaHei, Microsoft YaHei Light, Microsoft YaHei UI, Microsoft YaHei UI Light, Microsoft Yi Baiti, MingLiU, MingLiU-ExtB, MingLiU_HKSCS, MingLiU_HKSCS-ExtB, Miriam, Miriam Fixed, Mongolian Baiti, MoolBoran, MS Gothic, MS Mincho, MS PGothic, MS PMincho, MS UI Gothic, MV Boli, Myanmar Text, Narkisim, Nirmala UI, Nirmala UI Semilight, NSimSun, Nyala, Palatino Linotype, Plantagenet Cherokee, PMingLiU, PMingLiU-ExtB, Raavi, Rod, Sakkal Majalla, Segoe Print, Segoe Script, Segoe UI, Segoe UI Black, Segoe UI Emoji, Segoe UI Light, Segoe UI Semibold, Segoe UI Semilight, Segoe UI Symbol, Shonar Bangla, Shruti, SimHei, Simplified Arabic, Simplified Arabic Fixed, SimSun, SimSun-ExtB, Sitka Banner, Sitka Display, Sitka Heading, Sitka Small, Sitka Subheading, Sitka Text, Sylfaen, Symbol, Tahoma, Times New Roman, Times New Roman Baltic, Times New Roman CE, Times New Roman CYR, Times New Roman Greek, Times New Roman TUR, Traditional Arabic, Trebuchet MS, Tunga, Urdu Typesetting, Utsaah, Vani, Verdana, Vijaya, Vrinda, Webdings, Wingdings, Yu Gothic, Yu Gothic Light, Yu Mincho, Yu Mincho Demibold, Yu Mincho Light (via Flash)
Are Cookies Enabled?
0.43

1.34
Yes
Limited supercookie test
0.9

1.87
DOM localStorage: Yes, DOM sessionStorage: Yes, IE userData: No


Is that good or bad?

[fanglekai]

Mine started out 1 in 4.6 million then when I refreshed it dropped in half each time...not sure how to interpret that.

[Umbrella Corp]

Mine started out 1 in 4.6 million then when I refreshed it dropped in half each time...not sure how to interpret that.

Q:

    Why does your browser remain unique, even if you reload the page?

A:

    As noted in the panopticlick privacy policy, the site uses a 3-month persistent cookie to try to prevent double-counting of browsers.

    Now, you may ask, what about people who block cookies? If you block cookies and hit reload, your browser will be multi-counted in the live data at panopticlick.eff.org, which means that the numbers will be overly optimistic about how non-rare your broswer is.

from the FAQ

[RustyShackleford]

1 in 4,637,003 baby. Even though I sometimes change my user agent java script fucks me up. With noscript it goes down to 1/10,000 or so. Apparently there was an extension that would fudge all the details picked up by js, but its no longer maintained. Anyone know of ways to do this?

Um... I think you misunderstand how this works. The MORE unique you are, the EASIER it is to track you. You being 1 of everyone else tested means you can back tracked without a shadow of a doubt who you are.

I'm kidding about the enthusiasm. What screws me is that even though I can change my http headers it is still obviously a linux machine because of the plugin and system font information. I don't care enough to use noscript all the time, but unfortunately I'm totally unique unless I find an addon or something that can fake those values.

[Lanny]

I'm not sure using useragents is meaningful. If you're using a evergreen browser, which everyone is at this point, it changes multiple times a week.

I'm not sure why people are concerned by being unique anyway. There are more reliable ways of "tracking" a person than their browser details.

[Herr Ruin]

Browserfingerprinting is the #1 Reason why most skiddies are not able to defraud large retailers like amazon after fucking up for the first time. Yeah you should be concerned if your browser is too unique in regards to browser fingerprinting but this one mainly concerns individuals who are up to shady shit anyways

[Herr Ruin]

I'm not sure using useragents is meaningful. If you're using a evergreen browser, which everyone is at this point, it changes multiple times a week.

User Agents are not fooling anyone at this point, this Video should give you an idea what I'm talking about:

[Lanny]

I'm not sure using useragents is meaningful. If you're using a evergreen browser, which everyone is at this point, it changes multiple times a week.

User Agents are not fooling anyone at this point, this Video should give you an idea what I'm talking about:

That's kind of my point though. Besides browser plugins the greatest source of entropy in the test for my browser was its useragent. I'm saying that since it's such a short lived value it can't really be used to identify someone.

[aldra]

Your browser fingerprint appears to be unique among the 4,659,032 tested so far.


precious snowflake

[stdio.h]

[stdio.h]

Apparently there was an extension that would fudge all the details picked up by js, but its no longer maintained. Anyone know of ways to do this?

https://github.com/dillbyrne/random-agent-spoofer/