Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The protection for canvas fingerprinting seems not to be enabled. #2856

Open
canalun opened this issue Dec 16, 2024 · 1 comment
Open

The protection for canvas fingerprinting seems not to be enabled. #2856

canalun opened this issue Dec 16, 2024 · 1 comment

Comments

@canalun
Copy link

canalun commented Dec 16, 2024

Description

The protection for canvas fingerprinting seems not to be enabled.

Steps to Reproduce

When visiting https://browserleaks.com/canvas with the extension on/off, the Signature the web site provides is the same.

I.e, canvas fingerprinting does not seem to work.

Expected behavior:
The signatures are different.

Actual behavior:
The signatures are the same.

Versions

  • Extension: 2024.10.16
  • Browser: Chrome
  • OS: Mac

Additional Information

The process of the fingerprinting on this page is explained here: https://browserleaks.com/canvas#how-does-it-work

And I checked the following things:

  • if ddg's modifyPixelData() is called when the page calls toDataURL() on canvas: It wasn't called.
  • if browserleaks.com is added to unprotected sites: No.
@canalun canalun changed the title The protection for canvas fingerprinting seems not to be effective. The protection for canvas fingerprinting seems not to be enabled. Dec 18, 2024
@canalun
Copy link
Author

canalun commented Dec 23, 2024

I found a commit which seems to have disabled canvas fingerprint protection.
https://github.com/duckduckgo/duckduckgo-privacy-extension/blame/main/shared/data/bundled/extension-config.json#L5084

If possible, could you please tell the reason why protection has been disabled for both audio and canvas?
I'm interested in the reason as a duckduckgo user :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant