Supermium

[NotHereToPlayGames]

On 12/30/2024 at 10:29 AM, j7n said:

It is "Black Mesa," and has nothing to do with the topic at hand.

<OT>

Watching "Archive" on YouTube and look what came up.  

</OT>

[D.Draker]

17 hours ago, Sampei.Nihira said:

What is the ultimate purpose of fingeprinting?

Personalized marketing and ads.

Those who effectively block trackers + ads break this chain,because they will never see the ultimate purpose of fingerprinting.

So it would be more logical than worrying about blocking all trackers + ads.

 

Not only, it's used by "security" services, especially in countries with oppressive, self elected regimes. 

No one says to block all trackers, @NotHereToPlayGamesalready explained to you, and I always agreed, you have to blend in, which is very hard with Supermium.

[D.Draker]

18 hours ago, VistaLover said:

@hidao

Already contained inside the SE entry posted by D.Draker, you can test your own browser's font fingerprint by loading: 

https://browserleaks.com/fonts

(depending on your setup, the font scan and fingerprint calculation may take up to 15s; YMMV...)

If you're really concerned about font fingerprinting (actually, only a fraction of browser fingerprinting techniques), some extensions are available: 

https://chromewebstore.google.com/detail/font-fingerprint-defender/fhkphphbadjkepgfljndicmgdlndmoke

and a more powerful one (designed to tackle broader fingerprinting attempts, not just the one based on installed fonts): 

https://chromewebstore.google.com/detail/font-fingerprint-defender/fhkphphbadjkepgfljndicmgdlndmoke

Read more: https://jshelter.org/fpd/

I'm terribly sorry, I never tried those, from some extensions I tried earlier, they randomise your fonts, and those, do they have a function of fixed, default font sets, let's say from win11?

Thanks.

 

[UCyborg]

What's with all Half-Life references here lately? Black Mesa, Xen...

[j7n]

Calibri was added since 2007 Office System. How does it indicate that one runs Office 365?

The Half-Life references came because people saw I had a video open in a screenshot.

[NotHereToPlayGames]

8 hours ago, D.Draker said:

they randomise your fonts, and those, do they have a function of fixed, default font sets

I suppose there are a few ways to look at this.

The font "fingerprint" is basically a javascript MATHEMATICAL function that detects the available fonts on your system and the MATHEMATICAL OUTPUT is a thirty-two digit number.

It's that 32-digit number that is your "fingerprint".  Just send a completely RANDOM 32-digit number that has NOTHING TO DO with your actual installed fonts!

Note also that each "slot" of the 32-digit number is not limited to 0 thru 9.  It also contains HEXADECIMAL digits.  So each "slot" can be 0 thru 9 or A thru F.  That's sixteen available "digits".

That's "only" 340,282,366,920,938,463,463,374,607,431,768,211,456 different available fingerprints.  16^32.

You could just as easily not use a RANDOM number but just sequentially send in sequence.

000000000000000000000000000000
000000000000000000000000000001
000000000000000000000000000002
000000000000000000000000000003
000000000000000000000000000004

 

But DO NOT DO THIS!  Why?  Because the resulting 32-digit number is then DECYPHERED and I guarantee that a very VERY large number of those 16^32 "fingerprints" result in a DECYPHER ERROR.

Look at that this way.  A credit card only has SIXTEEN numbers.  But there are NOT 10^16 different credit card numbers because the first four digits must correspond to an actual bank and is a FINITE SET.

Edited January 1 by NotHereToPlayGames

[Sampei.Nihira]

9 hours ago, D.Draker said:

Not only, it's used by "security" services, especially in countries with oppressive, self elected regimes. 

No one says to block all trackers, @NotHereToPlayGamesalready explained to you, and I always agreed, you have to blend in, which is very hard with Supermium.

Not only that, fingerprinting is also used effectively during the onset of a malware infection.

What you cite is carried out by those who use their browsers by default.
Most people.
But these browsers do NOT block fingerprinting + ads/trackers attempts properly.

You study Firefox,the anti-tracking protection also blocks fingerprinting,it is an elementary thing to understand:

So any anti-tracking protection (DNS,adblocker.....) used in any browser,also blocks fingerprinting.

Then if a user also wants to block some fingerprinting attempts they do the right thing.
But it is necessary to use the only extension that all browsers have an adblocker,or use internal features of the browser itself:

     

This is functional camouflage.

Look at these pc setup configurations,you will not find users who have specific extensions dedicated to fingerprinting:

 

https://malwaretips.com/forums/pc-setup-configuration-help-showcase.12/

 

Edited January 1 by Sampei.Nihira

[D.Draker]

On 12/30/2024 at 12:59 PM, NotHereToPlayGames said:

Because yeah, 27 chromes is not normal.  Something within your profile is causing that.

Cent, I'm currently on. It has 10 extensions installed, look at the capture.

Which again proves my statement about Supermium being too heavy.

[NotHereToPlayGames]

5 hours ago, D.Draker said:

Cent, I'm currently on. It has 10 extensions installed, look at the capture.

Out of intellectual curiousity, please install TAMPERMONKEY and ALLOW it to open its "thank you for installing" HOME PAGE.

I have NEVER witnessed Supermium open up OVER A HUNDRED chrome.exe's until I installed TAMPERMONKEY in a fresh Supermium profile and as the first-ever Tampermonkey "default as-is" install.

[UCyborg]

On 12/27/2024 at 7:19 PM, UCyborg said:

var Opa = parseFloat(255 * (255 - Lum) / 65025).toFixed(1); // opacity between 0 and 1

About that font altering script adding text-shadow property, I do wonder about the line above, is division by 65025 intentional or a typo? Since largest unsigned 16-bit integer happens to be 65535.

[Karla Sleutel]

On 1/1/2025 at 1:18 AM, Sampei.Nihira said:

You study Firefox,the anti-tracking protection also blocks fingerprinting,it is an elementary thing to understand:

In this topic, we study Supermium, it's a Chromium based browser, and it is an elementary thing to understand.

[NotHereToPlayGames]

9 hours ago, UCyborg said:

About that font altering script adding text-shadow property, I do wonder about the line above, is division by 65025 intentional or a typo? Since largest unsigned 16-bit integer happens to be 65535.

That line only applies where the original before-adding-shadow font has an alpha channel parameter in its original coloring.

While I only spent a few minutes to hunt, I cannot find a web site that defines text with an alpha channel.  I would kind of need to see in real life to see how the math is working.

ie, if the original alpha is 0.5, maybe it is intentional that the shadow uses 0.45 (plucked from the air, not a mathematical resultant of Opa formula) for visual aesthetics.  Again, I'd kind of need to see it in action.

 

edit - on second thought, look at the next line.  ie, if (Lum<128) Opa=1.  I think right there is your answer on why Opa is not "full range", because Lum<128 is already reducing the Opa range.

 

edit2 - this is also why I'm a fan of this font improvement as a Tampermonkey script.  Full control.  And even could use "alternate formulae" on 'whitelisted'/'blacklisted' web sites.

Edited January 2 by NotHereToPlayGames

[hidao]

On 1/1/2025 at 12:26 AM, VistaLover said:

@hidao

Already contained inside the SE entry posted by D.Draker, you can test your own browser's font fingerprint by loading: 

https://browserleaks.com/fonts

(depending on your setup, the font scan and fingerprint calculation may take up to 15s; YMMV...)

If you're really concerned about font fingerprinting (actually, only a fraction of browser fingerprinting techniques), some extensions are available: 

https://chromewebstore.google.com/detail/font-fingerprint-defender/fhkphphbadjkepgfljndicmgdlndmoke

and a more powerful one (designed to tackle broader fingerprinting attempts, not just the one based on installed fonts): 

https://chromewebstore.google.com/detail/font-fingerprint-defender/fhkphphbadjkepgfljndicmgdlndmoke

Read more: https://jshelter.org/fpd/

Acturelly,i don't care about that...

[Saxon]

13 hours ago, hidao said:

Acturelly,i don't care about that...

Then, why ask?

[Saxon]

One of the most notorious fingerprints Supermium has, it's the "version 99" tag, whereas all normal chromes have 24,

https://github.com/win32ss/supermium/issues/1101