abrahamjuliot / privacy-cat Goto Github PK

View Code? Open in Web Editor NEW

24.0 3.0 3.0 274 KB

Cat like security against browser and device fingerprinting

JavaScript 99.78% HTML 0.22%

fingerprinting device-fingerprint browser-fingerprinting privacy-protection privacy-tools

privacy-cat's People

Contributors

Stargazers

Watchers

Forkers

pbxdev stvhanna yy520a

privacy-cat's Issues

Object.getOwnPropertyNames(navigator) should remain empty

UA, Platform are not consistent with Client Hints

Spoofing these APIs will require spoofing all relevant Client Hint headers and Client Hint navigator APIs.

Option 1: Spoof and update on each version release
Otption 1A: Limit spoof to version
Option 2: Let all these points alone
Option 2A (recommended): Let all these points alone and require permission to read navigator.userAgentData.getHighEntropyValues()

Incognito

https://developer.chrome.com/extensions/manifest/incognito

Options: Block APIs

Options: Alert Fingerprinting

Options: get new random fingerprint (show hash id)

Outline Logic

If device os type is know to support touch, then randomize max touch points
If randomized platform is mac, then randomize mac renderers

icons https://vectr.com/

https://vectr.com/
https://developer.chrome.com/extensions/manifest/icons

Use 32 or 64 bit contexts in randomization

Options: Detect Fingerprinting

Options: Whitelist (turn off on this domain)

Interference detection

// Object Value Properties:
Object.getOwnPropertyDescriptor(Navigator.prototype, "userAgent").get.toString()
Object.getOwnPropertyDescriptors(Navigator.prototype)['userAgent'].get.toString()
Navigator.prototype.__lookupGetter__('userAgent').toString()
// Each should return "function get userAgent() { [native code] }" (Chrome) 
// or "function userAgent() {\n    [native code]\n}" (Friefox)
Navigator.prototype.userAgent
// Should return an error... not the value 

// Object Method Properties:
Object.getOwnPropertyDescriptor(HTMLCanvasElement.prototype, 'toDataURL').get.toString()
// Should throw "Uncaught TypeError..."
Object.getOwnPropertyDescriptor(HTMLCanvasElement.prototype, 'toDataURL').value.toString()
Object.getOwnPropertyDescriptors(HTMLCanvasElement.prototype)['toDataURL'].value.toString()
// Each should return "function toDataURL() { [native code] }" (Chrome) 
// or "function toDataURL() {\n    [native code]\n}" (Firefox)... not an Uncaught TypeError

Object Value Properties should return "function get userAgent() { [native code] }"
Navigator.prototype.userAgent should return an error... not the value
Object Method Properties get should throw "Uncaught TypeError..."
Object Method Properties value should return "function toDataURL() { [native code] }"