/g/ - Technology

That doesn't smell fishy at all. Nope. Nothing suspicious at all.

JK it's probably going to make life a shit ton easier to actually permaban people now when they go goreposting on /b/ or some retarded shit. I know a few anons that see getting banned as a minor inconvenience. Would love to see those sorts of people get rekt.

>>67704105
>T. Glow in the dark CIA nigger

>>67704105
>yes goyim, let the gook track you and sell your data off to orbitfour47.com, it's okay think about all the goreposters

Wow, you weren't kidding.
So what now, what's the game plan to blocking this crap?

>>67704144
>>67704131
>T. Maximus Paranoia.

>>67704158
>So what now, what's the game plan to blocking this crap?
kidnapping the gook and forcing him to debotnet the site. getting rid of canvas fingerprinting is pretty impossible.

>>67704172
I'm serious. What's the workaround? Even non-JS captcha doesn't work.

>>67704184
we have to make a big stink about this to force that fucking gook to remove the canvas fingerprinting from the site.

https://panopticlick.eff.org/

last thread:
>>67694372

>>67704215
That website doesn't even load properly, keeps restarting.

>>67704259
>keeps restarting
if you pressed "test" then that's normal. just wait.

>>67704144
God forbid he sells the IP that I share with 1000 people, the size of my browser, and the text that I posted. I'm totally compromised now!

>>67704293
>IP
you don't understand fingerprinting you mongoloid. It has nothing to do with cookies, IP or anything else. It's a fingerprint based on your software and hardware.

>>67704274
>https://panopticlick.eff.org/
Tried that with and without real companies, got 3 YES's, a No, and a loading element.
That's after I enabled javascript.

>>67704338
>java
canvas is html5 so don't think you're safe

>>67704389
So what do I do now? Block canvas API for all but vital websites?

>>67704389
I think you need JS to manipulate it though.

>>67704401
>Block canvas API
this breaks captcha so you could never post again.

>>67704409
I'm totally fine with pissing on 4chan's corpse. I'm talking facebook and my Uni's site.

>>67704423
if you don't need to post here, then use "CanvasBlocker" addon for firefox and set it to block all or block all except whitelist.

>>67704308
Not him but I think most of the people in this thread don't understand what this really is. I see a lot of "its super secret THEY MUST BE TRYING TO PROBE MY ANUS" sort of paranoia.

From my perspective at least, the only use I can see for this is to make punishing ban evaders that much easier. If it's truly a fingerprint based on your hardware and software, it would be so much harder for a person to bypass a ban. Simply getting a VPN, clearing your cookies, or trying from a different browser wouldn't cut it. You'd see lest shitposting on /v/ where some cunt comes along and says "HAHA CANT CATCH ME TRANNY JANNIES" and proceeds to break as many global rules as he can.

Or, you know, maybe everyone here is right and gookmoot is really Mark Zuckerburg, selling all your data to marketing teams who will see that you dumbasses are super paranoid while watching Boku no Pico and start recommending anime bodypillows to you as you browse amazon.

One of these things makes sense. The other makes some HUUUGE assumptions based on the idea that the entire world is out to get you.

>>67704052
Can't use just use ublock to block the actual canvas image from loading or more sensibly only allow board images? It seems to come the i.4cdn domain. If it can't load, it can't fingerprint, right?

>>67704437
So how do I know canvas blockers works or hasn't been compromised?

>>67704440
>>From my perspective at least, the only use I can see for this is to make punishing ban evaders that much easier.
this is entirely false and not doable you mongoloid piece of shit on damage control. You can't ban people based on this.

>>67704459
set it to block all and see how it breaks captcha, or use a canvas test (posted in the previous thread which is linked to here)

>Issue: using CanvasBlock and randomizing the readout still gets you a unique fingerprint each time, making you stand out even more
Faking -> Random Number Generator -> persistent

Now it only stays the same within browser session or until you clear it manually

>>67704496
which one is best?

>>67704462
What makes you say that? CS 1.6 servers can ban players based on machine ID, why can't 4chan ban someone from this fingerprint shit?

It uniquely identifies you.

>>67704052
>bitcoin miners
>fingerprinting
>canvas
>How many times do you need to be told?
disable javascript

>>67704513
>fake readout API: Canvas Blocker's default setting, and my favorite! All websites not on the white list or black list can use the <canvas> API to display something on the page, but the readout API is forced to return a new random value each time it is called.
>fake at input: on display of text the drawn pixels get modified slightly. This makes the detection of the add-on harder but is less secure. On WebGL-canvas the behaviour is identical to "fake readout API".

>>67704527
>disable javascript
breaks the site and 4chanx

>>67704052

>>67704052
Does anyone know how to actually contact hiroshimoot and complain about this garbage? Isnt there like an irc channel or something?
I only know of his youtube channel:
https://youtu.be/hfG52aO_yEo

>>67704520
>he thinks those are the same as canvas fingerprinting
go back to /v/

>>67704613
his twitter

>>67704561
4chan X works for me without JavaScript. Well, other than the JavaScript from 4chan X of course.

>>67704613
his twitter
@hiroyuki_ni

>>67704644
I dont use twitter, and you shouldnt either.

>>67704659
I don't care about your view on that. make a fake account using a fake email or something.

>>67704052
i'm block the shit sites and i.cdn.org:
||i.4cdn.org/*
and allowing per board. example:
@@||i.4cdn.org/g/*
i think the solution is block everything, and allow the necessary, but it's too much autist work for today

>>67704616
>he thinks that canvas fingerprinting cant be used by the webserver's backend to automatically IP ban users with known fingerprints
isn't there a new episode of Infowars you need to be watching?

>>67704685
>fingerprinting
>IP ban
different things, mongoloid.

>>67704695
hurr durr its totally impossible to put a fingerprint in a banlist and then ip banning people who try to post with a banned fingerprint doiiiiiiiiiiiii

how do i get fingerprinted?

>>67704707
it's retarded, plebbitor.

you would be banning random IP's of other people because this is assuming the user has dynamic IP. so every time they use the site, IP's that will get used by loads of other people get banned. you really are brain dead huh?

Just read straight from the 4chans API.

e i g h t faggots, no insane captcha and only fill it once every 24 hours

>>67704732
on desktop?

>>67704725
>"ip ban" means permanent
Ok so he is just making assumptions. Also I find it funny you call reddit when you are using reddit spacing
>>>/out/

>>67704736
yeah but the userbase is ultimate autism.
>>67704754
duration is irrelevant, because dynamic IP had change multiple times per day.

Is it finally time to exodus to 8ch?

>>67704782
it would only work if we did it en masse. otherwise we'd have to go and deal with that terrible userbase of cripplechan.

>>67704762
>the userbase
you mean the 23 people that use that site all have autism?

ok so uh i installed this https://chrome.google.com/webstore/detail/canvas-defender/obdbgnebcljmgkoljcdddaopadkifnpm and now captcha just goes through every time??? cool???

>>67704682
Yeah, this is what I did,and I'm not getting the fingerprint png, but I dunno if that means it's still not being generated serverside at thus fingerprinting is happening or if it actually stops it.

>>67704809
/tech/ is fine for the most part.

>>67704762
Actually you know what, I'm going to spell it out for you seeing as you haven't figured it out by now. I'll use your reddit spacing so you can understand.

Lets say a person called dumbass gets his ass permabanned for posting CP. Dude gets his pc fingerprint swiped, and banned. Fingerprint added to his ban.

Dumbass has the brilliant idea of deleting cookies, resetting browser session, changing his IP, and posting new images. But what he doesn't know is the fingerprint will still match him.

Now when he goes to post, the server goes "Hey i know this guy", tempbans his IP (doesn't need to be a long ban, just like a 30 second ban). Lift the ban on the old IP and apply it to the new IP. He can keep changing IPs and we keep shifting his ban. As a failsafe keep the last known IP banned incase he tried a new PC, then BOOM add that fingerprint to his ban.

TLDR match IP to fingerprint, fingerprint to id, ip bans dont need to be permanent when fingerprint bans are, use your brain

>>67704762
>the userbase is ultimate autism.
here it is autism + cancer + reddit, so I'll take autism only over that.

>>67704850
>redditspacing CIA nigger is trying to justify spying on all users
>BUT MUH CHILD PORN!!!!

privacy invasion damage control is literally always the same

>>67704871
>calls reddit spacing
>in a post with reddit spacing
not sure if retarded, or just trolling. Probably both

>>67704850
>>67704877
>newfag trying to make an argument
if you think the pedo posters don't use tor and tor browser / tails, you're a brain dead child.

>>67704912
Of course they don't use tor browsers on 4chan to pedodump, because tor exit nodes are blocked on 4chan brainlet.
Stay summer eternal

>>67704935
>not using a proxy after going through tor
stay pleb, newfag

>>67704850
Fuck off no one cares about ban evasion. Only bootlikers like bans. And even that doesn't s not justify invasion of privacy without consent.

>>67704940
>proxy after tor
>essentially eliminating the point of tor
>still give 4chan an IP to ban AND A FINGERPRINT
cmon mcfly, think!

>everything keeps getting worse

>>67704935
You literally press in button on tor and still pass true

>>67704965
>>essentially eliminating the point of tor
you don't know how things work, do you?

>>67704955
How is it an invasion of privacy?
>oh no the service i post on every single day is keeping track of who i am incase i decide to start being evil
>wheres my rights
fuck off retard, you are using their service they have the right to make it possible to deny you access to their service. Where's 4chan's rights? Oh, wait, they dont get any because it doesn't benefit you. Fucking retard

>>67704972
btw I noticed how you moved those goal posts. We were talking about fingerprints, now you are going on about a solution for a hypothetical ban evader to ban evade around a hypothetical solution to ban evasion... incase you forgot.

>>67704979
I think I have a better understanding than you at this stage.

>>67704862
>autism + cancer + reddit
8gag is also that. Enjoy having to worship the board owners of the few live boards there like a cultist, you fag.

>>67705008
>schizo is SEETHING
>still trying to do damage control
>doesn't understand enough to know his point is a non-argument

>>67704105
>when they go goreposting on /b/
Posting gore is not against the rules.

How can I reproduce OP's pic?

>>67705029
>but he's retarded
This is how I know i've won. Rather than attack my argument, you attack my character. I'l

>>67705040
>http://lmgtfy.com/?q=what+is+the+definition+of+example

>>67705027
you're stupid if you think that. Literally never had a problem with a board owner since I dont frequent boards with retarded owners. /tech/ at least is just fine, and since I only browse /g/ here its all I need.

>>67705054
Open network manager, refresh page

Why are you people trying to make Hiro look bad? Hiro has done nothing wrong.

>>67704458
What would be blocked under that?

>>67705058
http://lmgtfy.com/?q=using+non+sequiturs+as+argumentation

>>67705094
How have I used such a logical fallacy? I've claimed that this fingerprinting shit could possibly be used for banning, people say I'm retarded, I explain how it could possibly be used for banning, people say I'm retarded, I give example scenarios, people continue to attack my character...

oh wait, I'm on 4chan. The home of ad hominem.

>>67705136
not him, but you are literally the most dense autistic on this board right now.

unless practically everything on your machine is set to default and you're using popular hardware, you will be identified by your fingerprint.
changed the window size? changed the location of your taskbar? using an operating system that isn't windows 7 or windows 10? using something to block scripts? have a non-standard font installed? you're already more unique than you think, especially when this information is paired with your ip range. it's a lost battle.

>>67705151
why the fuck do browsers leak all this information in the first place? I fucking hate web 2.0

>>67705144
Still ad hominem tho.

>>67705163
you still haven't made a legit argument in favor of privacy invasion.

>>67705159
to sell all your information

>>67705159
money.

>>67705159
Thank javascript. You can literally get the private IP of your computer with it.

>>67704105
>implying those people don't protect themselves and/or easily can continue

This is for the common user alright

>>67705178
You still haven't shown me how a unique image that is designed to identify your computer, that is made on the client without any server influence, is an invasion of privacy.
I haven't being trying to argue in favor of privacy invasion because as I see it, this is not an invasion of privacy.

>>67705066
Even with all addons disabled it's not listed for me.

>>67705093
It blocks two GETs one being the fingerprint PNG. I went to disable my setting, because I forgot what the other was and now they're not loading. I wonder if he removed them or the only show up sometimes. Either way it blocked the fingerprints from being loaded. The thing is, I don't know how they're generated, do they still exist server side, did that stop them? I dunno, but they don't load.

>>67705206
>You still haven't shown me how a unique image that is designed to identify your computer, that is made on the client without any server influence, is an invasion of privacy.
HAHAHAHAHHAHAHAHAHAHHAHAAH

>>67705178
banning pedophiles
isn't this enough!?

>>67705224
Ad hominem again. It's almost as if you can't come up with a counter argument or anything other than logical fallacies in response...
My work here is done, enjoy your shitty board. I have a bed to sleep in.

This should be blocked by this filter in uBlock filter list: https://github.com/uBlockOrigin/uAssets/blob/master/filters/filters.txt#L168

I don't see these requests with uBlock filter list enabled.

I bet this guy lives in a house made of glass with how little he cares about his privacy

lmao at you faggots falling for this bait thread

>>67705254
4chan was added to this filter only 4 days ago, so if it's not being blocked by you, purge your filter cache and update them again.

>>67704440
This won't do shit for ban evaders, fingerprints are easy to change if you know what you're doing. What this does allow, however, is selling data. Gookmoot can sell your 4chinz data to the data brokers who can connect it to your real name, all online accounts, browsing history, etc. etc.

>>67704871
>>redditspacing
It's called markdown, redditor. Only redditors call it reddit spacing

>>67705349
t. butthurt redditor.

>>67704105
/b/ is where the gore should be, and should stay dumb fuck

>>67705275
you're not fooling anyone Hiromooti

>>67705355
no u

>>67704052
It's not canvas fingerprinting. Open the .png in GIMP and export as raw data. Then open that in a text editor (replace all "ÿ" with "" if there are any). It's a json object that contains HTML, CSS and JavaScript. pic related

>>67705388
what do we do against this fucking gook?

>>67705422
stop using 4chan ;)

>>67705422
just block the script that downloads the png

>>67704105

>>67705492
and the next time he adds another domain/script?

>be le me
>be non tech illiterate + not retarded
>use umatrix and ublock origin
>never see these new ads
>no fingerprint in network monitor
feels good to not be retarded bros.
you all need to go back to /v/ until you learn how to use a computer.

>>67705503
then you do this >>67705492

>>67705523
but then you're always a step behind the fucking gook.

Freddy got fingerprinted

Have any of you paranoid mongoloids actually tried reverse-engineering the Canvas elements it uses?

First canvas is used to decode the image-encoded JSON which has adloading shit.

https://hastebin.com/iteyemerac.py - Decoder (needs Pillow, run as decoder.py that-scary-looking-image-you-freak-out-about.png)
https://hastebin.com/xowedekore.json - Output from above.

Second canvas is used just to display ads.

is there a way to block this with noscript yet?

>>67705538
if you want to get ahead, do this >>67705448

>>67704850
You're assuming the ban can be associated with a fingerprint. If an user does not run first-party JS, no fingerprint can be relayed.

>>67705554
see >>67705388

>>67705588
Yeah, I'm aware. I provided links since people would rather be paranoid than actually spend two seconds decoding minimal obfuscation.

https://hastebin.com/sujequruro.js is the inner JS, prettified.

I'm not getting anything like this. Is it random or have I avoided the noid?

>>67705649
only people that are already on "the list" get it. you dodged a bullet, because you're a good boy.

>>67705669
>>67705649
>the list
no such thing. ublock has added it to the filter list.

>>67705649
You're probably already blocking the in-page ad-loader script from boards.4chan.org.

>>67704052
4chan deserves to appear on the next botnet bingo.

>>67705543
kek

>>67704437
help, retard here. Installed disconnect privacy badger, canvas blocker and keep getting this.

>>67705780
click "show full results" and see how bad the fingerprint is. it gives you a number.

>>67705780
90% of fingerprinting comes from javascript. use umatrix or noscript to block it by default, and allow it when you need to.

>>67705833
breaks every single site.

Go check out how canvas fingerprinting work and calm down. Just install 3 random fonts and add a flash player. It collects multiple data and renders an image

>>67705854
>just install 3 random fonts and add a flash player
Yes, let us all go and make sure our fingerprints are unique and identifiable

>>67705933
IF EVERYONE IS UNIQUE NO ONE IS ;D

>>67705803
>>67705833

I blocked everything as you see, if I remove eff scripts page won't even load

>>67706050
you can't get rid of fingerprinting, but you can make yourself less unique, so go and look at the full results.

>>67706100
>fucking botnet REEEEE

how bad am I?

>>67704052
>using CanvasBlock and randomizing the readout still gets you a unique fingerprint each time, making you stand out even more
wat
If you're getting a new fingerprint at each load, doesn't it mean you can't be tracked at all? Or am I retarded?

>>67706131
first of all, set CanvasBlocker to pic related (persistent will clear when you close the browser) otherwise you getting a new fingerprint for every reload (default setting) will make you stand out way more.
>those fonts
set in about:config:
browser.display.use_document_fonts" = 0

maybe if everyone bought a 4chan pass hiroshimoot wouldnt need to resort to this :^)

>>67706176
everything else still remains the same, but the canvas, which means you stand out a lot. just do this: >>67706217

>>67706217
maybe I should just run that script that fixes ff
ty for your time

>>67706131
try disabling javascript

>>67706249
>that script that fixes ff
what?

>>67706271
>have to selectively re-enable it for every single site you ever visit so that they actually work

why is no-script captcha (4chan x) broken?

>>67706305
i only enable it for websites i use often
>>67706331
werks on my machine

>>67706272
>https://github.com/pyllyukko/user.js
too lazy to do this though

>>67706403
yeah I did this already, but you have to change it to make it usable for every day use (at least I had to).

>>67704052
test

>>67704052
They already do it through this. All your posts are tied to this cookie. If you block cookies, you can't post.

>>67706331
because you have referrer spoofing enabled.

testing now to see how my network activity behaves.

>>67704052
>using CanvasBlock and randomizing the readout still gets you a unique fingerprint each time, making you stand out even more

Yeah but if you appear to be a completely unique user every time you load the site, you're not being tracked for shit.

I dont see this shit at all

>>67706466
cant you just use autodeleting cookies?

>>67706466
I use "Cookie AutoDelete" with a whitelist.

it is amazing because people are majorly against it but hiro doesn't give a fuck and won't listen to anyone since he is getting his $ from /pol/'s drooling retards

>>67706507
>if you appear to be a completely unique user every time you load the site
so you change your ip range every time you load 4chan? cool story bro

>>67706517
>cant you just use autodeleting cookies?
Yes, that's one solution, to delete that cookie every time after you make a post. Coupled with IP randomisation should make you more difficult to track. But it's necessary to do both.

>>67706517
for me it's kind of random. try reloading the page or opening a few different threads

>>67706466
If anything everybody here is already tracked through Recaptcha anyways.

>>67704052
if i have a 4chanpass can i use canvasblocker?

>>67706569
Not really. If you change your IP you're a new person for CF and Google.

https://addons.mozilla.org/en-US/firefox/addon/canvasblocker/
https://addons.mozilla.org/en-US/firefox/addon/canvas-fingerprint-defender/
which is better?

test

>>67706593
>only data exploitable is IP
You're forgetting HTTP/user header which almost nobody bothers changing. Plus knowing Google they probably actually do their own fingerprinting.

>>67706305
With things like umatrix, this is damn fucking easy and works great. You are just a little retard OwO!

>>67706631
Google is easy to trick if you just remove their cookies and change your IP. They don't go that far, at least not for advertising purposes.

If you don't see it, it's either because you're blocking the script before it can load (via uBlock/ABP's latest rules), or because you're not blocking anything. That image will only pop up if it detects that it cannot load adclix.png.

>>67706648
Google hates privacy and openly admitted it in the past. Shit like this wouldn't be unexpected from them.

Someone help me understand. I use ublock origin and haven't seen any of these ads. That four47 domain shows that it's connecting but I'm not seeing any

>>67706679
Aforementioned adclix.png

welp

>>67706643
>OwO!
spotted the retard

>>67706717
/^https?\:\/\/i\.4cdn\.org\/.+\/\d{4}\/\d{2}/$image,domain=boards.4chan.org

>>67704782
8gag is a crock of shit

>>67706717
boards.4chan.org##script:contains(contentAd)

>>67704052
>Browsing /g/, not using an adblocker.

>there is people ITT who don't browse the web with privacy.resist.fingerprinting set to True
I shiggy diggy.

>>67706806
fuck that, it keeps resizing the window

>>67705245
Don't worry anon, your argument makes me find you agreeable.

>>67706806
*can't install any addons from AMO because it pretends to be firefox 52*

>>67706742
>>67706792
what do I do with these?

>>67706827
Works on my maschine.
>>67706832
That's on you for using a deprecated version of Firefox. Since the 60 release it spoofs ESR 60.

>>67706843
put them in my filters in ublock orign

>>67706806
It's good, but not enough. It will still be able to uniquely identify you if you have JS enabled.

>>67706855
Oh, that's slightly less terrible then. I just haven't used resistfingerprinting since quantum came out

>>67706858
Well, with JS on it's literally impossible to remain annonymous. It is trivial to fingerprint by storing soundcard information, fonts and the way your OS sends requests through the network.
Not every website and company, however. Some protection on some sites is better than no protrction.

You can tell him now

https://youtu.be/Bvn3p7dlBrM

So turns out it's just JS in a png file then? No cause for alarm if I roll without JS?

>>67706988
js was a fucking mistake that is for sure

>>67707030
Is that really?

>>67707030
wtf who is this jap? where is moot

>>67707078
yes

>>67707037
how do you make the site work without it? if I disable it css breaks and I can't use the catalog.

>>67707086
Didn't do anything special to make it work, just disabled JS and everything works.
Everything except catalog. You'll have to learn to live without it.

Can I ublock my way out of this today as well?

>>67707030
TELL HIM!

>>67707030
But can his chair do this?

>>67707125
see >>67706792
and >>67706742

How do I ublock the "Connection Error" unknown page error tho?

>>67707030
What is he talking about?

>>67706050
>If I remove eff scripts page won't even load
Real funny that, it will work if you go into the global settings (asterisk next to domain name) and block scripts from there.
uMatrix seems to do something weird, and letting something slip if you don't.
I think it has to do with it loading different domains as first party when it's doing the test, or something like that.

Don't like that blinking tic he has
pls nuke him

Also ask him why he went to north korea.
Is he CIA?

>>67707172
he said that buying 4chan and running it into the ground is payback for hiroshima

>>67707172
how to package your data profiles into different value tiers for customers

How the fuck do I post now? I downloaded CanvasBlocker and turned the fingerprint thing in firefox to true. Is uBlock and NoScript the issue?
I can solve the captcha but I can't post.

>>67707166
@@||4chan.org^*$csp=default-src 'self' * data: 'unsafe-inline' 'unsafe-eval'

>>67707121
if I disable javascript page styles break and defaults to the shitty yotsuba one. I also can't use quick reply or get any (you)s. I just tried whitelisting a.4cdn.org and s.4cdn.org in noscript and the site seems to work now, but I'm still getting a blank space at the top and bottom of every page. am I getting the aids or not?

>>67707030
>You can tell him now
>https://youtu.be/Bvn3p7dlBrM

the gook is ignoring my comments

>>67707211
check ublock logger if anything gets blocked when posting

>>67707269
Throw money at it

>>67707148

Thanks.

>>67707259
Quick reply and (you)s are part of native extension so they won't work without JS.
And apparently it does default to Yotsuba style without JS. Didn't know that.

>>67704440
I could see the merit in that - it would be a valid a technique some places use - but please don't forget that from he ran 2ch, Hiroyuki Nishimura was alleged to have collected user data without consent (which ultimately leaked), and that he had also been selling it.

So the concerns are not merely theoretical, but have some plausible historic precedent directly relevant to the person in charge of the site when he ran another site just like this one.

Of course since then, a few things have changed. For example, it may be a GDPR infringement.

okay lads, t. brainlet paranoid, are those 2 ublock entries enough to stop this shite from putting its finger up in my ass?
and how do i get non js captcha

>>67707555
yes until something new happens
Be alert these days

>>67707555

You should also purge all the cache from the filters you use, add some more in, and update them all

>>67707555
>enough
from what i can tell, yes
nothing suspicious in the network tab anymore
>non js captcha
4chan x

>>67706217
how to fake screen size?

>>67707817
you can't.

fucking hiroshimoot
when are we buying the site off of him

>>67708019
after we crash its value

basically you're all retards

>>67708100
>disable javascript
>hurr look it doesn't fingerprint
>realize every single page on the web needs javascript to function

>>67708115
oh look
another retard

>>67706792
This works.
>>67706742
This is malware tier.

>>67704052
>he allows mixed content anywhere
poor form

fuck I thought just blocking javascript from i.4cdn.org would work but that also stops webms from loading

>>67708130
not
an
argument!

>>67708100
i've tried this on a new installed os with a newly installed firefox with no addons and that shitty test still gives me im unique in over 2 million fingerprint.
its a shit test desu

test

>>67704052
Can we just ban a few countries?
Like Germany, India, and France?

>>67708249
>not banning Ameritards

>>67708223
what's the point of arguing with a retard.
>>67708230
that's because nobody keeps their OS or browser on freshly installed stock settings
retard

>>67708272
t. retard who can't make a single argument.

>>67708266
Stay off the internet it was basically invented by Americans. Also /pol/tards don't represent all of us.

>>67704052
eat shit https://github.com/kkapsner/CanvasBlocker/

>>67708291
>t. retard who thinks javascript is the be-all end-all of web security
like i said, i don't argue with retards

>>67708334
>CERN is American
Wew.

>>67704259
Block all 3rd party domains, use the malwarecss filter, and get a canvas spoofer.

>4chan.org##script:inject(abort-current-inline-script.js, String.fromCharCode, /[0-9a-f]{40}..$/)

>>67708334
>everything was made by americans even if it wasn't

>>67708360
>>67708420
>What is (TCP/IP)?

>>67708434
it's shit

>>67708434
>>the Internet is TCP/IP
Wew lad.

>>67708441
>>67708446
Your booty blasted replies are glorious. Later fags hopefully your country bans 4chan.

>>67708473
>hopefully your country bans
my country has infinitely more freedom than the united states of mutts.

heh finger me now bitch
nothin personnel gookmoot

>>67708334
The Third Reich invented personal computers and the internet.

idgaf anymore. Literally impossible to block everything. Maybe if gookmoot stopped signing up for the most disgusting eye cancer diseased ads to dump on here I'll put up with ads and he wont need to sell data.

>>67704827
why are you so quick to trust an extension made by literal WHOs that are probably selling your data as well.

I swear you people are fucking stupid sometimes. If you want to be secure, stick to add-ons made by people you trust and know, don't just install 50 add-ons for the fuck of it, because you're installing shit made by literal nobodies that have nothing to lose.

>>67708556
Canvas Blocker is GPL so it's more safe than just browsing without anything at all

>>67708556
I've uninstalled it of course. I just wanted to try it and see if it had an effect (it didn't since: >>6770538). I realize running closed-source addons from the chrome store is dumb.

>>67708625
meant >>67705388

>>67708542
i can see you glowing from here cianigger

>>67708334
Europe invented technology sweaty. Europe also invented humanity and civilization.

>>67708800
>civilization
Sumeria is not Europe.

>>67704215
Is 19 bits of fingerprint info a small enough amount?

>>67709043
yeah it's fine.

So, what's the fix?
Lots of conflicting info and the idbhsgy.com shit doesn't work any more.

>Hiroshimoot updates YET again his malvertising ads on the daily
>Suddenly threads for fixing his gay shit get invaded by an horde of clueless damage control retards

>>67709665
I just updated my ublock filters, blocked the new domain "orbitfour47.com" in ublock, and turned privacy.resistfingerprinting to true and I'm not getting any ads or the canvas image. Everything is exactly the same as it was beforehand

>>67709789
why is spiderman being impregnated

so am I safe if I don't see any ads or not?

>>67708334
Yeah that’s a yikes for me

kek faggot.

>>67710710
Which fix did you do?

>>67710789
I use uBlock Origin.

>>67705514
HTML Fingerprinting isn't something you can protect against with just matrix and origin.
You have to spoof your user agent to something botnet tier, disable cookies, and prevent reading from canvas.

Here's a somewhat detailed analysis I've put on my blog with how2block and how Yavli works.

https://www.nexisonline.net/index.php/2018/09/20/4chans-new-ad-loader-and-canvas-fingerprinting-accusations/

And yes I know my blog sucks.

>>67711676
so what is the quick rundown on all this? the new shit is just a way for gook moot to backdoor ads on people who don't have up to date ad blocking? it's only an ad loader for now, but it could be used to sneak malware in?

the part that concerns me is that the second vector is hosted by 4chan's own image server supposedly, which means it gets past noscript. I'm not seeing any ads though with only noscript, so at what point is the process being stopped for me?

>>67711676
Thank you, I enjoyed reading this.

>Yay, fake news and smut.
But is it real smut or fake smut?

>>67711889
Both ad services appear to have /relatively/ good rep, and Yavli even lists their employees, most of whom have western-sounding names and LinkedIn profiles. Not something you'd do if you were being skeevy.

4chan's server just proxies through to Yavli's servers, I suspect, since they'd have to provide translation of whatever Revcontent provides to what Yavli consumes. You'd have to ask Hiro to be sure, though.

>>67711943
but what is the process going on my machine? noscript should be blocking the adclick.png from loading, which makes it load the canvas image from i.4cdn.org, and since I have that whitelisted it should be loading the ads through that, but I'm only seeing a blank space where the ads are supposed to be. what am I stopping and what am I vulnerable to?

>tfw I even added the domain (orbitfour47.com) to my hosts file in windows

>>67708542
>dumb frogposter
>calling anything eyecancer

>>67712196
To see revcontent, disable NoScript (on the entire tab, not each website individually), your adblocker, and disable 4chanX since it has a CORS adjustment. To get Yavli to fire you do all that, and then just block orbitfour47.com.

As for what's going on on your machine, I have no idea.

>>67704105

I used to get banned all the time on /mu/ for no reason, this would ruin 4chan

>>67706331
do you have gstatic and google blocked?

>>67712326
no?

>>67706466
test

>>67712364
Might be google analytics, tag, ad, some APIs.

>>67712248
but if I'm not seeing ads does that mean I'm safe or it only appears that way? I am worried that my setup is not secure enough.

>>67711676
>doesn't block the connection to the url

>>67712444
Hit F12, enter networking tab, refresh page. If you only see 4cdn and 4chan.org shit you're fine.

>>67712440
even with umatric off, it's broken for me.

>>67712480
Hmmm. I turned off everything, it's broken for me too. Hell if I know.

>>67704052
Can we have Chinkmoot's word on this? We need answers. Where does he live?

>>67704052
Protip: NONE OF THIS APPLIES TO THE LATEST VERSION OF SAFARI

Safari will prevent this kind of tracking by providing a default profile for this kind of fingerprinting. Apple saving the day yet again.

>>67712285
Same, I'm stuck in a range ban right now. Happens every few months.

>>67712537
>Where does he live?
yeah, asking for a friend.

So If I block orbitfour47.com via ublock origin, am I in the clear?

>>67712648
There's two, the orbitfour47.com, then the randomized ad shit. Use regex for that /i\.4cdn\.org\/[a-z]{3}feolite/

>>67712681
Interesting enough when I added that 4cdn.org went from green to yellow indicating something got blocked. Thanks.

>>67705388
What the fuck, why. Throw that JS code in here, I need to parse this shit for myself to believe. WHY THESE HOOPS? YOU ARE VERY, VERY PAINFULLY OBVIOUSLY HIDING SOMETHING.

>>67710212
strange, never saw it with a y before

>>67712600
But rest assured, kind citizens, that in no way did Hiro accept money from Apple to introduce fingerprinting in 4chan so that upset users would try to find a solution, thus encouraging migration to Apple's new anti-fingerprinting version of Safari. These two are just a coincidence in timing, I'm sure.

>>67712725
Actually from what I can tell it's just a block of JSON data, throw it through https://jsonvisualizer.com/ and tell us if you find anything interesting.

Brainlet here, am I safe if I use clover

>>67712725
>>67712741
Already did the work for you.
>>67711676

Can someone point me to what I should be copy pasting into ublock origin?
Already did purge cache + update but any extra safety is good
I know I should just read the thread but this is coming from some clueless tech illiterate

>>67708187
>This works.
only on firefox

>>67712768
see >>67712681

>>67712741
JSON DE ROO LOW

>>67712758
My hero. But why canvas? I am completely lost as to why Hiro would want this data in such a weird format.

>>67704052
>Issue: using CanvasBlock and randomizing the readout still gets you a unique fingerprint each time, making you stand out even more
how is that an issue? if your fingerprint changes each time it is still effectively worthless as a fingerprint.

>>67712750
>clover
yes

>>67712803
Yavli isn't a 4chan-only thing, there's other sites using it. My best guess is that it's both obfuscation and getting around signature-based adblockers.

>>67712806
>how is that an issue? if your fingerprint changes each time it is still effectively worthless as a fingerprint.
because canvas is not the only thing used to fingerprint you, and all other variables will stay the same. so you will stand out more.

>>67712808
ty fren

>>67712781
Thanks

someone make the new thread (with instructions), this one is over the bump limit.

>>67712463
I don't think I can view that on the browser I'm using. I tried showing the images for a page with and without noscript turned on, and without it there were 4 more images including 4 blank ones and one that looked broken. does that mean I'm probably safe?

>>67713252
If one looks like this, you still have Yavli.

>>67704052
what about this?
Does it still go through?

||i.4cdn.org/*/*/*$domain=boards.4chan.org,important
!faggot shit tracking

Is noscript captcha fucked on 4chan x for anyone else?

>>67713408
That filter is a bit overcomplicated, just use this
||i.4cdn.org/*feolite^

>>67712725
>YOU ARE VERY, VERY PAINFULLY OBVIOUSLY HIDING SOMETHING.
What? I explained exactly how to get the stuff in my image.
>>67712741
It's json data that contains css, html and js as strings.

>>67713408
>Is noscript captcha fucked on 4chan x for anyone else?
yeah it's dead.

test

>>67713785
works on my machine

>>67713785
Test

recording got fucked up so here's #2

>>67713838
>>67713785
works on my machine(tm)

>>67713822
you can get an addon that generates canvas "noise"

>>67713309
left is with noscript on, right is off. I blocked the adclick one with hosts file. I should probably just use a different browser but I don't know what's good.

>>67713992
You need a proper adblocker as well to block the enormous space it adds.

Fuck this I'm going to 8ch.

>>67714026
See you in two minutes.

>>67714084
What a coincidence.

>>67713882
captcha displays, and solves, but when I post it says captcha wasn't correct or couldn't go through or something.

I use this to disable lots of garbage in firefox, can someone see if anything in here is what fucks up captcha?
https://my.mixtape.moe/yzdojn.user.js

it's based on: https://github.com/pyllyukko/user.js/ but changed to make it bearable for everyday use (and fix youtube and shit)

>>67714190
Just an idea: Disable the userscript.

>>67714254
what userscript? that js is a firefox profile file (basically persistent about:config)

>>67714305
Revert it, whatever. It would make sense if it affected captcha since Google renders to canvas and shit.

>>67705514
>umatrix and ublock can prevent fingerprinting
>frog poster
makes sense

>load page
>no ads
>f5
>now ads
wtf why is this happening?

>>67714334
>It would make sense if it affected captcha since Google renders to canvas and shit.
if you looked at mine, you'd see I don't have canvas disabled, mine is way less agressive than the one from: https://github.com/pyllyukko/user.js/

besides, modern captcha works, only no-script captcha doesn't.

>>67705803
>Currently, we estimate that your browser has a fingerprint that conveys 18.73 bits of identifying information.
How fucked is that?
Also why does canvas not help against the unique fingerprint test?

>>67714522
>>Currently, we estimate that your browser has a fingerprint that conveys 18.73 bits of identifying information.
How do I check this anon?

literally can't get no-script captcha to work even if I disable all addons (other than violentmonkey for 4chanx)

REEEEEEEEEEEE how do I fix this?!

>>67712681
>regex
?

>>67714350
ok I removed orbitfour47.com from my hosts file and now I don't see ads even when I refresh. is noscript not actually blocking the first type of aids? why would it only stop the second ads if I don't f5?

>>67714675
orbitfour47 is only used to check if you're blocking ads, if it detects the URL as blocked, it loads the ads directly from 4chan.

Why don't we just make a decentralized alternative to 4chan?

>>67714769
yeah but the only way I see ads is if I block that site in my hosts file and then load a page and hit f5. why would it happen that way? is it safe to just leave it unblocked in hosts or am I vulnerable?

>>67714790
because it would only host cp

>>67714797
You need to block the actual script embedded in each webpage 4chan serves. Otherwise, it reaches out and tries to connect to that site (which you've blocked), fails, and then loads the ads from 4chan itself instead.

>>67714790
>>67714803
This. Dickheads spam it with CP.

Although actually there is Zerochan that doesn't, and 8ch doesn't have CP anymore, it just "eludes" to it, the mods need to be a lot more strict on 8ch.

What happens if you fake the readout instead?

>>67714900
this is fine if you do it per site per session and not per request. see: >>67704496

>>67714359
had the same issue some weeks ago, was because of some referer shit

Page 10.
>>67709407

>>67714937
>was because of some referer shit
can you explain? how did you fix it?