為了改善您的使用體驗,本網站正在進行維護,部分功能暫時無法使用。若本站的文件無法解決您的問題,想要向社群發問的話,請到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 發問,我們的社群成員將很快會回覆您的疑問。

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

Why is FireFox allowing "Canvas Fingerprinting" to track me?

more options

Since "Canvas Fingerprinting" seems to be the new way of tracking one. How does one TURN IT OFF! ---

A New Form of Online Tracking: Canvas Fingerprinting

http://yro.slashdot.org/story/14/07/22/0140256/a-new-form-of-online-tracking-canvas-fingerprinting --- Posted by Unknown Lamer on Tuesday July 22, 2014 @08:06AM from the subverting-features-for-evil-and-profit dept. New submitter bnortman (922608) was the first to write in with word of "a new research paper discussing a new form of user fingerprinting and tracking for the web using the HTML 5 <canvas> ." globaljustin adds more from an article at Pro Publica: Canvas fingerprinting works by instructing the visitor's Web browser to draw a hidden image. Because each computer draws the image slightly differently, the images can be used to assign each user's device a number that uniquely identifies it. ... The researchers found canvas fingerprinting computer code ... on 5 percent of the top 100,000 websites. Most of the code was on websites that use the AddThis social media sharing tools. Other fingerprinters include the German digital marketer Ligatus and the Canadian dating site Plentyoffish. ... Rich Harris, chief executive of AddThis, said that the company began testing canvas fingerprinting earlier this year as a possible way to replace cookies ...

Since "Canvas Fingerprinting" seems to be the new way of tracking one. How does one TURN IT OFF! --- A New Form of Online Tracking: Canvas Fingerprinting http://yro.slashdot.org/story/14/07/22/0140256/a-new-form-of-online-tracking-canvas-fingerprinting --- Posted by Unknown Lamer on Tuesday July 22, 2014 @08:06AM from the subverting-features-for-evil-and-profit dept. New submitter bnortman (922608) was the first to write in with word of "a new research paper discussing a new form of user fingerprinting and tracking for the web using the HTML 5 <canvas> ." globaljustin adds more from an article at Pro Publica: Canvas fingerprinting works by instructing the visitor's Web browser to draw a hidden image. Because each computer draws the image slightly differently, the images can be used to assign each user's device a number that uniquely identifies it. ... The researchers found canvas fingerprinting computer code ... on 5 percent of the top 100,000 websites. Most of the code was on websites that use the AddThis social media sharing tools. Other fingerprinters include the German digital marketer Ligatus and the Canadian dating site Plentyoffish. ... Rich Harris, chief executive of AddThis, said that the company began testing canvas fingerprinting earlier this year as a possible way to replace cookies ...

被選擇的解決方法

Based on the Pro Publica article, to date, this technology isn't especially accurate by itself. Nevertheless, maybe it could be combined with other information to uniquely identify your browser.

The JavaScript canvas feature is useful for animations and is now used by Google to draw spreadsheets. Disabling it -- if there were a convenient way to do that -- would need to allow for site-specific exceptions so you could use canvas where it's useful. I'm not aware of any specific feature or add-on for this.

Perhaps someone could create an add-on that would cause the canvas to have a certain degree of randomness, so that each time you visit a site it is just a bit different, and therefore the site doesn't know it's the same browser each time. Obviously you wouldn't want this to ruin the useful of canvas, so it would need to be subtle.

In the short run, have you considered using the NoScript extension? Most tracking that bothers people (tracking of your browsing across sites) is performed by scripts served from "third party" servers. If you keep scripts from those servers disabled to the greatest extent possible, then you can limit the ability of ad networks or others to follow you around.

從原來的回覆中察看解決方案 👍 3

所有回覆 (2)

more options

選擇的解決方法

Based on the Pro Publica article, to date, this technology isn't especially accurate by itself. Nevertheless, maybe it could be combined with other information to uniquely identify your browser.

The JavaScript canvas feature is useful for animations and is now used by Google to draw spreadsheets. Disabling it -- if there were a convenient way to do that -- would need to allow for site-specific exceptions so you could use canvas where it's useful. I'm not aware of any specific feature or add-on for this.

Perhaps someone could create an add-on that would cause the canvas to have a certain degree of randomness, so that each time you visit a site it is just a bit different, and therefore the site doesn't know it's the same browser each time. Obviously you wouldn't want this to ruin the useful of canvas, so it would need to be subtle.

In the short run, have you considered using the NoScript extension? Most tracking that bothers people (tracking of your browsing across sites) is performed by scripts served from "third party" servers. If you keep scripts from those servers disabled to the greatest extent possible, then you can limit the ability of ad networks or others to follow you around.

more options

For a programmer or programmer-to-be who might want to propose a patch to Firefox or create an extension, here is a link to the patch that was incorporated into the Tor browser to manage site-specific permissions to read the generated canvas:

https://gitweb.torproject.org/torbrowser.git/blob/maint-2.2:/src/current-patches/firefox/0021-Add-canvas-image-extraction-prompt.patch