Post Reply 
Protecting identity - blocking System Fonts info
Dec. 03, 2010, 07:05 AM (This post was last modified: Dec. 03, 2010 07:06 AM by JJoe.)
Post: #2
RE: Protecting identity - blocking System Fonts info
First, not a js expert or flash or java.

The info exists after the nosey flash or java applet runs. The javascript variable allows that info to be used outside flash or java. Nosey sites probably won't show or want you to know about the info.

I don't think we can expect to filter compressed flash or java files.

The Proxomitron can filter this javascript. However, I think these names are arbitrary and could be hidden. This looks like Whac-a-mole to me.

Disabling flash and java is probably the only way to be sure this info is not shared. But then, the nosey sites will know that flash and java are disabled. Wink

Code:
[Patterns]
Name = "To start, test at panopticlick.eff.org/index.php?action=log&js=yes"
Active = TRUE
Bounds = "function\s\w \{$INEST(\{,\})\}"
Limit = 1024
Match = "(\0\{)+{1}*"
        "(flashfontshelper|user_fonts"
        "|javafontshelper|getFontList)"
        "*"
Replace = "\0{ var fonts = "No Flash or Java fonts detected";"
          "return fonts;}"

BTW, 'fingerprinting' machines is not new.
Add Thank You Quote this message in a reply
Post Reply 


Messages In This Thread
RE: Protecting identity - blocking System Fonts info - JJoe - Dec. 03, 2010 07:05 AM

Forum Jump: