alt Hacker NewsGiven the recent hacking based on browser fingerprint, we really need browser developers to shut this shit down. Why are you even able to silently run all of these commands on my computer and report back to the mothership?
Replies
saidnooneever • today at 7:16 PM
you can disable extensions and run noscript. that should take care of most attack vectors that people roll. there are some CVE which dont use it but those are more rare and usually quite 'expensive' as they require an actual exploit rather than just some code.
Terr_ • today at 7:27 PM
The problem is that big companies with lots of money demand the situation continue so that they can make more money.
Because these capabilities are dual-use.
You want canvas to work for web games and design / drawing sites. Yet. minuscule differences in how canvas is implemented let other sites fingerprint you. The only way to fix this would be to have each browser be based on the exact same codebase and web engine, and do you really want that?