Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The key here is randomising them over time.

If you browse website A and website B, with different randomised qualities at different times, and your non-randomised data isn't enough to sufficiently identify you, then although A and B might be able to identify that you're spoofing certain settings, they can't identify that you're the same entity browsing both websites.

If you just set things to a weird or unlikely value, then you're as identifiable as a man who walks down the street in a mascot uniform that he never takes off. That is to say, although they don't know the 'person' behind the mask, all you need to look for is the dingus wearing the capital city goofball costume. Indeed, it makes you stand out more...



If not a lot of people do it the bit of information "this browser is spoofing certain settings" is also a very telling thing and combined with the non-randomized data may tip the balance towards uniqueness.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: