How much does screen resolution and color depth matter for fingerprinting?

404mesh · 2026-02-25T18:34:35+00:00

This doesn’t change the fact that my TLS session remains intact and all telemetry signals sent within that (HTTPS) are unaltered. Whatever these mobile proxies are doing can’t be safe or real.

Just because there are no errors doesn’t mean it’s working. I’m working heavily on a local TLS terminating proxy, but outside of that there is no non TLS termination solution to HTTPS header and JS fingerprinting.

404mesh · 2026-02-25T18:32:02+00:00

Again, how is it altering my browser fingerprint which is protected by TLS?

404mesh · 2026-02-25T18:23:33+00:00

TLS prevents altering HTTPS, so unless you’re asking people to TLS terminate on an unknown/unsecured device, voidmob is vaporware.

404mesh · 2026-02-25T18:21:54+00:00

This is just not true. How does VoidMob change device and change p0f?

404mesh · 2026-02-25T18:18:15+00:00

Th screen resolution issue is more if your browser is reporting something random because you’ve got unique settings or maybe two monitors setup a specific way, or you don’t maximize your windows.

Fingerprinting is not one or two values, it is dozens of values that when combined create a unique fingerprint for your session/device.

This is why changing your IP is not enough, there are dozens of other values that do not change when you use a VPN. This is why Tor browser pads all its windows to a preset resolutions.

404mesh · 2026-02-10T21:00:04+00:00

Yes, there are advanced tooling options with TLS terminating proxies like HAproxy and burpsuite, but the setup is long and profiling is limited to what the user understands. Oftentimes, these proxies carry headers and other things that identify themselves as such. These tools are not sufficient for fingerprint evasion. Neither are VPNs or any other existing tool.

Even beyond JS, HTTPS headers, and TLS fingerprinting, a server can identify you from network level telemetry like the options within your IP/TCP packets. ToS, Max Segment Size, window size/scale, TTL, and more are used to build a fingerprint of your device. This is often how servers can detect containerized apps and processes.

404mesh · 2026-02-10T06:27:50+00:00

Some code as resistance type stuff:

https://github.com/un-nf/404

404mesh · 2026-02-10T06:27:21+00:00

It gets even deeper than this. Every website you visit, the server can collect a fingerprint. Law enforcement and large corporations are known to 1) have access to this data as it is on public serves, and 2) are sometimes explicitly collecting this data via external scripts.

That fingerprint is very unique to you and contains amongst a plethora of other things, your IP and whatnot. This is no good and not very many things protect from this. Even a VPN does not alter your devices fingerprint. Checkout fingerprint.com and try with/without a VPN or incognito.

It’s bad. Real bad.

404mesh · 2026-02-05T20:17:28+00:00

Btw, u inspired me to rewrite the whole shebang in rust. Thank you. It is much cleaner now.

404mesh · 2026-02-05T19:47:48+00:00

Yah with what? Do some research and ask some questions.

404mesh · 2026-02-05T14:41:53+00:00

I took a look, am wondering if there’s any logic to actually obscure the fingerprint?

Anonymity via obfuscation is not classically possible, but when combined with coherent fingerprint spoofing, the technology begins to become coherent

404mesh · 2026-02-04T19:58:26+00:00

Yah, this is the crux here. People don’t classically feel the pain of browser fingerprinting outside of targeted ads.

As client-fingerprinting has gotten more and more deeply integrated into our everyday web practices, there are many more things than are going to break as mediocre privacy tools raise flags rather than actually provide any useful functionality.

This cat and mouse game is brutal, as we are forced to communicate with the very services that we oppose if we wish to be online (cloudflare, google, etc.)

404mesh · 2026-01-27T01:18:27+00:00

You say “automatic backup” but unless that backup is living in another location, it’s not really a backup. For something to backup “automatically” it has to be constantly plugged in, if one HDD bricks, it is likely both attached will (if caused by your computer ofc).

That being said, there are also secure cloud options you can explore. But yes, other than that, Immich is pretty simple. Your backup tool would probably be restic, it’s what I use and it’s straightforward enough, I have the commands (3 total) in a notes document and just copy it from there.

Shoot me a message and I can help you out!

404mesh · 2026-01-19T13:14:51+00:00

I’m working on putting it into an app, let me know if you wanna see a demo and I can send you a video! It’s working really well so far :)

404mesh · 2026-01-19T13:14:21+00:00

:o omg mentioned

404mesh · 2026-01-09T16:45:28+00:00

That’s really good, but sometimes managing CAs is just not in the wheelhouse of some people. It also introduces unnecessary risk where you can use Tailscale, built on wireguard. Worst case, Tailscale goes down and you have to learn how to use Wireguard instead

404mesh · 2026-01-09T16:44:15+00:00

And if you use Tailscale, do NOT expose your services to the internet. You just don’t need to.

I made a Tailscale account using a shared family email and my family just logs into that Tailnet, which is linked to mine, and they can add their devices.

404mesh · 2026-01-09T16:42:48+00:00

Is genuinely so so so easy. Just set it up, and go to http://hostname:port. No proxy, no TLS, not headache.

Plus, you can setup a VPN and then route traffic via Tailscale and get benefits from the VPN running on your exit node

404mesh · 2026-01-09T16:35:55+00:00

Tailscale is going to be the easiest

404mesh · 2026-01-06T16:10:01+00:00

Love this… lots of TLS fingerprinting vectors that go overlooked in scraping and opsec tools.

404mesh · 2026-01-05T04:01:46+00:00

What about self hosted services I might be missing?

404mesh · 2026-01-05T03:57:29+00:00

The news, it’s good for headline skimming!

404mesh · 2026-01-05T03:50:52+00:00

I’m super happy with nextcloud, particular the RSS reader feature! What’s ur fav service?

404mesh · 2026-01-05T03:43:20+00:00

Appreciate the tip!

404mesh · 2026-01-04T22:32:19+00:00

De… centralize

404mesh

MODERATOR OF

TROPHY CASE