#fingerprinting — Public Fediverse posts

Alors la protection contre le #fingerprinting de #Librewolf c'est bien, mais souvent tu ouvres une page web et tu te prend un flash lumineux dans les yeux parce le site ne sait pas que tu préfère le thème sombre 😵‍💫😵‍💫😵‍💫

Alors la protection contre le #fingerprinting de #Librewolf c'est bien, mais souvent tu ouvres une page web et tu te prend un flash lumineux dans les yeux parce le site ne sait pas que tu préfère le thème sombre 😵‍💫😵‍💫😵‍💫

Alors la protection contre le #fingerprinting de #Librewolf c'est bien, mais souvent tu ouvres une page web et tu te prend un flash lumineux dans les yeux parce le site ne sait pas que tu préfère le thème sombre 😵‍💫😵‍💫😵‍💫

#EEF met à disposition un outil pour mesurer le degré de vulnérabilité de votre #navigateur #web au #fingerprinting :

https://coveryourtracks.eff.org/

Sous #Librewolf avec #ublock, #JSShelter et #PrivacyBadger, on obtient un résultat pas trop mauvais, même si (1) l'outil ne couvre pas tout et (2) « Your browser has a nearly-unique fingerprint ».

Après, plus il y aura de monde sous #linux et moins mon empreinte sera unique 😄

#Development #Comparisons
Fingerprinting protection · How Brave, Firefox, and Safari protect users from fingerprinting https://ilo.im/16f6b5

_____
#Business #Privacy #Fingerprinting #Brave #Firefox #Safari #Browser #WebDev #Frontend

Trust this “Amazon” phishing email in Japan—and you’re Prime sashimi 🎣 🍣

Looking into our malspam data, we identified an active campaign impersonating Amazon and targeting Japanese citizens. The emails use subjects such as 「至急 Amazonプライム会員情報の確認」 (“Urgent: Confirm Amazon Prime member information”).

The URLs within the emails ultimately lead to an Amazon phishing page, but only after routing victims through a TDS. Interestingly, instead of keeping the TDS step invisible, the actors chose to show it off—repackaging it as a reassuring security check.

Upon clicking the link within the email, victims are first redirected to an RDGA TDS domain, where fingerprinting occurs. If the user does not match the targeting criteria (e.g., connecting from outside Japan), access is blocked. If they do match, potential victims are redirected to a second RDGA domain.
This second and last domain is not a TDS domain, but funny enough, these actors decided they would emulate it anyway!

At that step victims are already at the landing page but instead of immediately displaying a standard Amazon phishing page, the website displays a CAPTCHA and fake console interface simulating environment fingerprinting checks to “make sure your environment and connection is safe” before "proceeding to the landing page". Ironically, part of their message is true: fingerprinting did happen one domain earlier. It just wasn’t for the user’s benefit—it was to make sure the environment was safe… for the scammers. A few seconds later, without added user interaction needed, a fake Amazon login page is displayed.

Domains samples:
qqc10c[.]cyou
51wang11c[.]cyou

#dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #scam #phishing #amazon #malspam #email #fingerprinting #japan

RE: https://mastodon.social/@maquinari_cat/116348433550942240

LinkedIn està escanejant el teu navegador a la recerca de més de 6.000 extensions de #Chrome! 🕵️‍♂️ Aquesta tècnica de #fingerprinting permet recollir dades detallades del dispositiu, posant en risc la teva #privadesa digital. 🛑 Un pas més en el seguiment invasiu dels usuaris per part de les grans plataformes.

#LinkedIn #Seguretat #Ciberseguretat #Privacitat #Extensions #Tech

You know how #RichardStallman #GNU laments #javascript but also how nothing works without it? https://www.gnu.org/philosophy/javascript-trap.html
Alright, so say you torsocks lynx ( #KU ) #ProjectGutenberg. Alternately, you could use highest security #TorBrowser with #noscript. But have you tried #Vanguards #Whonix GW with #vlc ? There is a lot that can be done with vlc for media that wouldn't work in a tor browser (netscape-plus) with vanguards. You would think that there is more anonymity because more people use the more popular #browser / #terminal -plus method but there are trade-offs with functionality and less data leaking. Is less data leaking a form of fingerprint? @mokancan
#Forensics #JavaScript #Anonymous #FreeSpeech #FreedomOfInformation #censorship #Fingerprinting