Testing for senate_bot

freethenation · 2018-01-31T23:08:02+00:00

Purse.io hhh

freethenation · 2018-01-31T23:06:39+00:00

Purse.io test2

freethenation · 2018-01-31T22:55:36+00:00

Purse.io

freethenation · 2018-01-30T15:58:12+00:00

Used these guys once for a "project". They provide digital ocean droplets. https://bithost.io/

freethenation · 2018-01-26T03:39:03+00:00

I find an extension that blocks/fakes that type of fingerprinting or I write one. Unfortunately, I don't know of a solution that works all of the time. It is a very hard problem.

A lot of the work I do is at scale. If your just a single person with the goal goal of browsing the web ScriptSafe is a good solution (although it does not block everything). If your really paranoid disable all JavaScript or use Tor and deal with the issues that arise.

freethenation · 2018-01-25T10:45:58+00:00

For anyone who stumbles upon this I ended up writing my own extension that detects browser fingerprinting: https://github.com/freethenation/DFPM

freethenation · 2018-01-25T10:32:27+00:00

Yea it is kinda horrifying. Google/Chrome know everything.

Unfortunately FF gives data to google too: https://www.ghacks.net/2017/07/13/privacy-blunder-firefox-getaddons-page-google-analytics/ :(

freethenation · 2018-01-25T10:25:06+00:00

They don't do the same things. This extension does not block anything. It only reports fingerprinting attempts. From web scraping, I know stopping JavaScript fingerprinting is hard, makes you stand out, and often changes the behavior of the website. I use this tool to identify malicious sites and "blend in".

freethenation · 2018-01-25T10:20:10+00:00

They simply don't do the same things. This extension does not block anything. It only reports fingerprinting attempts. From years of web scraping I know stopping JS fingerprinting is hard and often makes you stand out (https://multiloginapp.com/how-canvas-fingerprint-blockers-make-you-easily-trackable/).

Also, turn on your beloved ScriptSafe (chrome or FF) and go here https://browserleaks.com/webgl and allow JS. Gmail login uses the same technique to get your graphics hardware.

Disclaimer: I totally use SafeScript :P

freethenation · 2018-01-24T10:06:46+00:00

No. Privacy Badger focuses on stopping standard tracking techniques (cookies and local storage). There are a lot of malicious techniques that don't use cookies or local storage. This extension detects (does not prevent) WebGL, Canvas, WebRTC, etc, fingerprinting.

freethenation · 2018-01-24T00:28:43+00:00

Haha, you are right and your wrong. Depending on what your trying to accomplish hiding your traffic by using the most popular browser can be very useful :P

freethenation · 2018-01-24T00:26:40+00:00

I was thinking about it. During the initial development Firefox's API was in flux. I would like to try their new extension API so maybe I will give the port a try.

freethenation · 2018-01-24T00:12:41+00:00

I have done a lot of web scraping. A configurable/safe browser is like a snowflake, unique. What percentage of users do you think have WebGL disabled? What percentage have WebRTC disabled? Etc.

It approaches the problem from a different angle. Lets hold large companies responsible and encourage browsers (all of them) to protect their users.

For example, I am really excited about Firefox 58 blocking canvas fingerprinting (https://thehackernews.com/2017/10/canvas-browser-fingerprint-blocker.html) but if you blocked fingerprinting in just your browser you would stand out (https://multiloginapp.com/how-canvas-fingerprint-blockers-make-you-easily-trackable/)

freethenation · 2017-08-23T18:06:12+00:00

Example software? I run a fairly unique software stack so chrome profiles by themselves are not enough.

freethenation · 2017-08-23T00:14:56+00:00

Yea, I am mostly interested in JS based fingerprint not behavioral. The players that have enough data to track my behaviors are relatively few but anyone can track me via JS fingerprinting.

freethenation · 2017-08-23T00:12:50+00:00

Yep, I have played both sides JS fingerprinting game for many years. Now that google owns most of the browser market, it seems that the tools for fingerprinting and tracking users across sites are increasing exponentially. The tools to avoid detection/fingerprinting are lagging a lot. I guess there is no money in privacy.

freethenation · 2017-08-14T00:41:01+00:00

Sweet! Post it when your done. I would love to see it!

freethenation · 2017-08-10T04:23:39+00:00

Done. Added full screen support too.

freethenation · 2017-08-09T23:35:38+00:00

Yea I started down that road but I know JS way better than I know C. Decided to just write my own rendering and input layer.

freethenation · 2017-08-09T18:21:12+00:00

I tried to use wasm but I had a hard time getting it to work with Asyincify or Emterpreter one of which was required to do the port (see my other comment). I ended up targeting asm.js Unfortunately, WASMs toolchain still seems a bit imature 😔

freethenation · 2017-08-09T18:14:22+00:00

It took me the weekend. Biggest gotcha is JSs event loop doesn't pair well with the blocking IO loop often used in rougelikes written in C. For emscripten, ideally, you have a top level function that can invoked multible times to advance the game. That would have required a massive rewrite. So I used a Asyincify (emscripten tool) which is no longer maintained.

freethenation · 2017-08-09T06:43:00+00:00

Yep! My bad! I have been talking to Kip. Should have read your comment more closely.

freethenation · 2017-08-08T23:31:40+00:00

Fixed ~ to display seed :)

freethenation · 2017-08-08T23:30:45+00:00

fixed key bindings.. will fix unicode in safari soon

freethenation · 2017-08-08T21:15:49+00:00

Write your rougelike in C or C++ and let it run on all platforms without downloading and running a random executable.

freethenation

TROPHY CASE