DEV Community

Discussion on: How the Web Audio API is used for browser fingerprinting

Collapse
 
jankapunkt profile image
Jan Küster

So we all know the ethical implications of this but this tool is not more/less ethical than wireshark/nmap.

It is a dual use software and we should treat it like such:

  • it can be used for tracking und de-anonymization
  • companies, governments, militaries and intelligence agencies can use it for unethical reasons
  • however, especially military and intelligence agencies have much better options to track you down on a lower level or via metada
  • company fingerprinting is still covered by gdpr
  • there is definitely white use as well
  • for example: in our public research project we provide a tool for functional illiterates to assess and improve their fundamental literacy skills. Their only identifier is a code for login. If they forget the code they need to generate a new one. We use the fingerprinting to connect the sessions in such case and by thus ensure their anonymity
  • this contradicts the view we have on fingerprinting as de-anonymization tool
  • you see the world is not as dualistic as we might perceive it