back
2 comments
http://cubiq.org/project-underpants-explained - browser fingerprinting demo, they say flash being off reduces your anonymity.

You can measure fonts using JS to avoid having to have flash to do font based fingerprinting, eg http://www.lalit.org/lab/javascript-css-font-detect/. There's also the option to attempt to set the font and then get the style of the element and see if it's using the new font (works only on FF and Opera IIRC), eg http://www.quirksmode.org/dom/getstyles.html).

How well does this work - in other words, how identifying is the absence of such information?

(The third alternative would be to spoof the information on each request, but I don't know how well that would work, and it could cause other problems.)

Most fields won't report with javascript disabled. In those fields "no javascript" reveals 1.86 bits about you, and 1 in every 1.33 browsers has it disabled.