Protecting identity - blocking System Fonts info

[JJoe]

The filter appears to work for me. That is it sets the value of the variable "fonts" and causes the web page to display "No Flash or Java fonts detected" regardless of the browser's settings. The other variables are not modified by the filter.


  panopticlick.gif (Size: 18.79 KB / Downloads: 959)

You may have to beat on IE to make it let go of its cached copy of the external script or your Proxo may be choosing to not filter this external script.

Does the filter work in the Proxomitron's test window?

To debug while using sidki's set try loading http://panopticlick.eff.org/resources/fetch_whorls.js?prx-command=dbug..
Otherwise, enable "HTML Debug info" in the Proxomitron's log window and load http://panopticlick.eff.org/resources/fetch_whorls.js .
The Proxomitron's URL based commands no longer work in IE or you could also use something like http://px.dbug..panopticlick.eff.org/resources/fetch_whorls.js .

I agree to getFontList() and getAvailableFontFamilyNames() being predefined but I doubt that it matters.

Couldn't the author of the flash or java applet copy the info in the predefined variable to another flash or java variable and use the copy's name to pass the info to javascript?

Must a nosey site transfer the info to javascript before it can access it?

(Dec. 03, 2010 08:21 AM)OZO Wrote:  And when it comes to the fact that the nosey sites will know that flash and java are disabled, I'd say - that's the goal! Let them know that they will have trouble dealing with us .

And if the idea is to stop 'fingerprinting'...
Most people probably have flash, java, and javascript enabled.
Most people with flash and|or java and javascript enabled show some fonts.
People with browsers that execute flash and|or java but have no fonts via javascript are probably very few in number ( and probably filtering ads ).