Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Block known CDN-hosted fingerprinters #2891

Merged
merged 6 commits into from
Apr 18, 2023
Merged

Block known CDN-hosted fingerprinters #2891

merged 6 commits into from
Apr 18, 2023

Conversation

ghostwords
Copy link
Member

@ghostwords ghostwords commented Apr 6, 2023

This PR updates Privacy Badger to block CDN-hosted scripts that were found to engage in browser fingerprinting.

As a compromise to avoid breaking websites, we allow CDN domains to load, albeit without access to cookies. The problem is that sometimes the same domain is used to serve both unobjectionable content and obnoxious fingerprinters that do not need cookies to track your browsing. Privacy Badger will now fully block these fingerprinters.

Here is what this looks like in the popup UI:

Screenshot from 2023-04-14 10-01-20

Fixes #1527.

Related to #2839.

@ghostwords ghostwords changed the title Record fingeprinting script domains and paths Block known fingerprinters served from yellowlisted CDNs Apr 11, 2023
@ghostwords ghostwords force-pushed the record-fp-urls branch 2 times, most recently from f0634b4 to b4285f3 Compare April 17, 2023 15:49
@ghostwords ghostwords merged commit 506a880 into master Apr 18, 2023
@ghostwords ghostwords deleted the record-fp-urls branch April 18, 2023 14:49
ghostwords added a commit that referenced this pull request Apr 18, 2023
ghostwords added a commit that referenced this pull request Apr 21, 2023
ghostwords added a commit that referenced this pull request May 1, 2023
@ghostwords ghostwords changed the title Block known fingerprinters served from yellowlisted CDNs Block known CDN-hosted fingerprinters Nov 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Don't block domains by etld+1 for non-cookie tracking.
1 participant