Article @ gHacks.net:
https://www.ghacks.net/2018/04/05/how-t ... rprinting/
Article @ BleepingComputer.com:
https://www.bleepingcomputer.com/news/s ... g-attacks/
Proof-of-Concept demo:
https://umpox.github.io/zero-width-detection/
--
Any chance of a possible countermeasure in Pale Moon?
Preventing figerprinting through the use of zero-width characters
Forum rules
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific bugs, git, the repositories, etc.
This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Please post issues with specific websites, extensions, etc. in the relevant boards for those topics.
Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific bugs, git, the repositories, etc.
This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Please post issues with specific websites, extensions, etc. in the relevant boards for those topics.
Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
Re: Preventing figerprinting through the use of zero-width characters
Hmm.. this would require copied/pasted text to be manually transferred by the user between two locations both under control of the tracker to be even usable. It can't be used for fingerprinting in the normal way, and is an edge case at best. It will also not provide any more information to a tracker than potentially knowing the origin of the pasted text. Is that useful?
The only potential "countermeasure" would be to remove known "invisible" characters from copied text, but that's likely going to screw up clipboard operations of data that require (just as invisible to the user) control characters to be present, so whatever is done for it is inevitably going to break something else.
The only potential "countermeasure" would be to remove known "invisible" characters from copied text, but that's likely going to screw up clipboard operations of data that require (just as invisible to the user) control characters to be present, so whatever is done for it is inevitably going to break something else.
Last edited by Moonchild on 2018-04-13, 06:14, edited 1 time in total.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite