CanvasBlocker 的评价
CanvasBlocker 作者： kkapsner
369 条评价
- 评分 5 / 5来自 Firefox 用户 14156124， 7 年前Nice works.
Please note it does not detect (and block) the code embedded in a url through the
"data:text/html" directive.
I don't know if this method it's exploitable in a web page
example: paste the following code on your navigation bar
(It's a dots wave single pixel plotter, so it uses getImageData and it works even if you block the readout API):
edit: sample code moved to pastebin (sorry, pasting the code here does not works):
https://pastebin.com/pFvdgKNN开发者回应
发布于 7 年前Good point. I will see if this is exploitable. But please open an issue at https://github.com/kkapsner/CanvasBlocker/issues where we can discuss the implications and findings. Also communication is much easier there. - 评分 5 / 5来自 Firefox 用户 13835690， 7 年前Thank you for this extension (and for keeping it opensource). Nowadays it's getting harder and harder to get a sense of real privacy. CanvasBlocker + AdGuard for Windows + Privacy Badger + HTTPS Everywhere + custom user.js helps me feel safer on a growing data collection frenzy.
- 100% unique mean that is not really natural, canvas should not be unique but changed in order to be natural.
Unique canvas fingerprints will do much worse.
Is like you said you have a device that never exist.
To better understand how this work :
Google already have a full database with all kind of canvas signatures from all worldwide devices (iphone, android, computers, etc...), and if your canvas signature will not match on them database then you fail, it is a prove that your canvas is fake. If you try to spoof the signature then image pixel parameters will not match and again you fail so is almoust imposible to pass canvas.
On default settings may make it pass the google test.
For example google will not ask for SMS confirmation when a new gmail account is created because he trust the device you use.
Most of people must understand why unique signatures is bad practice and all softwares that spoof parameters will make traking services to detect the device much easy开发者回应
发布于 8 年前Please open an issue at https://github.com/kkapsner/CanvasBlocker/issues where we can discuss this. AMOs rating comments are too limited to have a good conversation.
One small comment on unique signatures: they are not bad by itself as long as they are not persistend (i.e. the timestamp you connect to the server is very likely to be a unique signature but it's not persistent). This is the case in the CB default settings. - 评分 5 / 5来自 Firefox 用户 14039775， 8 年前
开发者回应
发布于 8 年前This Addon does not have an icon that is always visible. Only a fingerprint icon is displayed in the adress bar when some canvas data was faked for the web page. You can test at http://kkapsner.github.io/CanvasBlocker/test/test.html
If you still think that it's not working properly try version 0.4.4a and open a new issue at https://github.com/kkapsner/CanvasBlocker/issues
EDIT: no problem. Glad that it works for you.- 评分 5 / 5来自 Firefox 用户 13870378， 8 年前
- 评分 5 / 5来自 containers-everywhere， 8 年前
- 评分 5 / 5来自 citizenserious， 8 年前
- 评分 5 / 5来自 Firefox 用户 13730996， 8 年前Hey there, take a look at Browser Console to know about your add-on's error. Keep up a good work.
开发者回应
发布于 8 年前I do not see any errors. Please open an issue at https://github.com/kkapsner/CanvasBlocker/issues where you can describe the scenario when you see the errors. 开发者回应
发布于 8 年前I currently face weird problems. Please open an issue at https://github.com/kkapsner/CanvasBlocker/issues with all your details (versions, settings, etc.) so that I can find the root cause.
EDIT: please try version 0.4.4- 评分 5 / 5来自 Firefox 用户 13600531， 8 年前This is a fantastic add-on for users who are concerned about privacy while surfing the web because it efficiently detects and blocks/fakes canvas fingerprinting. I use CB on all my machines with Firefox (52-ESR and >57) and it supplements nicely other privacy-related add-ons. Based on my own experience, I can also confirm that it receives superb support by a very helpful and responsive developer. Clearly a must-have five-star addon!
- 评分 5 / 5来自 Firefox 用户 13567263， 8 年前Funktioniert bei richtiger Einstellung korrekt. Schneller support. Danke!
Works fine if settings are correct. Fast response. Thanks!开发者回应
发布于 8 年前I will look into this issue (progress can be seen here: https://github.com/kkapsner/CanvasBlocker/issues/161). The faking is working fine on https://browserleaks.com/canvas
EDIT: They are using a very big canvas (400 000 pixels) to do the fingerprinting. It works fine if you disable the "Maximal fake size" ("Maximale Vortäuschgröße") setting. I will adjust the recommendation accordingly. - 评分 5 / 5来自 Firefox 用户 12596004， 8 年前Very configurable and useful tool if you don't want to be easily fingerprinted. In 1000 years it will be common knowledge to install in every Firefox. For now, we're the lucky ones that learned about it.
- 评分 5 / 5来自 Firefox 用户 12636919， 8 年前Seems to cause issues with direct links to images. When this addon is activated only a white page is displayed instead when the domain is loaded for the first time. Deactivating the addon and reloading the link makes the image show up correctly. Afterwards the addon can be re-enabled again without making the image disappear again (only lasts for the session, restarting firefox breaks it again).
FF ESR 52.5.0
Edit:
The issue has been resolved, the author created a separate version. Great support!开发者回应
发布于 8 年前This issue was already reported to me. But I'm not able to reproduce it on my end. Please create a new issue on github with the informations to reproduce the problem (Firefox version, installed Addons, CB settings, URL to the not working image and if the problem is still present when a fresh profile is used): https://github.com/kkapsner/CanvasBlocker/issues/new