DEV Community

Cover image for Fundamentals of digital security
Sologub
Sologub

Posted on

Fundamentals of digital security

When visiting any site, we leave a lot of data about ourselves, starting with the IP address and ending with digital prints, which are formed from all available data about the system, browser and plug

They are unique identifiers of 32 characters and are formed based on several types of data: language settings, fonts installed in the system, time zone, browser plugins, screen resolution, etc. Thus, it is possible to identify a specific user simply by comparing the fingerprints obtained by the site. At the same time, changing the IP address does not affect the print in any way!

About 90% of all browsers are unique! And the only thing we can do is get into the largest category possible. If you have a standard browser installed, without extensions, etc., then you will be identical to about 800 thousand users! Each next add-on makes you more unique. For example, installing the NoScript plugin reduces the uniqueness of 50%.

All information about the system is hidden in the TOR browser, but this gives the opposite result and makes the user stand out from the rest, although it provides a minimum of information to sites. For example, when JS is enabled, the site can see your screen resolution (you may have seen a warning pop up in the browser itself when it is open in full screen).

Here is a list of basic points:
• Canvas fingerprint - obtained using JavaScript. Different systems and browsers render images in different ways. On the basis of this, a unique imprint is formed;

• Screen Size and Color Depth - screen resolution;

• Browser Plugin Details - information about installed plugins;

• Time Zone - Time zone;

• ETag - an identifier that is formed from the contents of the browser cache;

• Language - system language;

• Hash of WebGL fingerprint - information about 3-D graphics. Contains information about the video card, etc.

• Font Fingerprints - fonts installed in the system;

• WebRTC Leak Test - unique identifiers of all audio and video devices in the system;

How to protect yourself from identification?
• Disable JavaScript (we will immediately remove Canvas prints, WebTRC);

• Disable saving cookies and cache;

• To change information about the browser, for example, there is a plug-in Random Agent Spoofer;

• Use a clean browser without unnecessary add-ons.

Sites where you can view your digital prints:
ipleak.com

browserleaks.com

whoer.net

panopticlick.eff.org

Discussion (0)