Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When I select "Cancel", many sites don't load. #6

Open
chesternick opened this issue May 11, 2021 · 9 comments
Open

When I select "Cancel", many sites don't load. #6

chesternick opened this issue May 11, 2021 · 9 comments
Labels
enhancement New feature or request unexpected

Comments

@chesternick
Copy link

When you select "Cancel", many sites do not load.

Can you add a function to substitute random values for all blocked parameters?

Your script is very good, and if you add this feature, it will be very good.

@abrahamjuliot abrahamjuliot added enhancement New feature or request unexpected labels May 12, 2021
@abrahamjuliot
Copy link
Owner

abrahamjuliot commented May 12, 2021

Thank you. I will give this some thought.

cancel is intended to attack the script (abort if possible) by throwing a storm of random errors. This is mostly intended to shut down untrusted or suspicious activity. Site breakage is intended. To feed the script only random values, select ok.

@chesternick
Copy link
Author

When I click "ok" it is not replaced by random.
Once, a random GPU model was changed on some browser. But the other parameters are not substituted for random ones.
On your SUPER.site (https://abrahamjuliot.github.io/creepjs/) , the "Math" value is highlighted in red, but it matches the actual value. This is in the mode when "ok" is selected.

@abrahamjuliot
Copy link
Owner

abrahamjuliot commented May 12, 2021

Give it a test at these sites:

creepjs is currently too difficult for me to overcome, but there's a lot I can clean up here to not get a negative F score. On that note, I'm not aware of any extensions, addons, or browsers that effectively randomize the fingerprint on creepjs. That's surely possible using built in methods: chrome's sensor API (time zone), built in device emulator, puppeteer automation, or a script attack.

The creepjs test site uses offscreen canvas (if supported) to fingerprint webgl. I plan to cover that here eventually, but it's still experimental with limited browser support. I would not expect it to be used in the wild, but I can add this protection.

If creepjs detects prototype lies or mathematical lies, the section hash turns red and the metrics are removed from the stable fingerprint. In this case, prototype lies are detected (the lie is the watch function added to the prototype), but I'm not randomizing the math computation.

@mendelsphotography
Copy link

on this note can you make that you can somehow go back Let's say you decide to deny the site and it breaks it so you want to go back and allow it currently you can not, but is it possible to make it that you can? @abrahamjuliot

@abrahamjuliot
Copy link
Owner

Yes, going back within the current tab is currently not an option, but you may start fresh by opening the site URL in a new tab.

@mendelsphotography
Copy link

Yes, going back within the current tab is currently not an option, but you may start fresh by opening the site URL in a new tab.

tried that and found it did not always fix

@abrahamjuliot
Copy link
Owner

abrahamjuliot commented May 2, 2022

That is odd. Just make sure to not open a new tab in the background. After a short delay, it will default to cancel. That's not by design, but rather the downside of the alert message.

On a side note, if you are interested in something a little more light weight and less aggressive, use this in your custom filters. It uses UBO's built in aopr method to abort on property reads and sends a random error message.

However, note that unique/random errors can be traced. I only recommend it as the default for sites you don't trust.

*##+js(aopr, HTMLCanvasElement.prototype.toDataURL)
*##+js(aopr, WebGLRenderingContext.prototype.getParameter)

@mendelsphotography
Copy link

Oh ok i think that explains why then The fact that sometimes was opening right after so did not clear yet but then sometimes it went back

@mendelsphotography
Copy link

thanks for the explantion

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request unexpected
Projects
None yet
Development

No branches or pull requests

3 participants