Screen fingerprinting protection is applied to extensions pages
See original GitHub issueFirst reported here: https://twitter.com/AaronToponce/status/1590038533963538432
I was able to confirm that the extension pop-up for Bitwarden is half size when screen fingerprinting protection is enabled. It appears this is because the browser is lying about the size of the screen to the popup page, which has a chrome-extension://
address. We should not apply this protection to such extension pages.
Issue Analytics
- State:
- Created 10 months ago
- Reactions:6
- Comments:6 (2 by maintainers)
Top Results From Across the Web
Google Chrome extensions can be fingerprinted to track you ...
To track users on the web, it is possible to create fingerprints, or tracking hashes, based on various characteristics of a device connecting ......
Read more >How anti-fingerprinting extensions tend to make fingerprinting ...
Browser extensions claiming to protect against fingerprinting will typically result in more data available for fingerprinting.
Read more >Google Chrome Extensions Can Be Fingerprinted to Track ...
The Extensions Fingerprints site only works with Chromium browsers installing extensions from the Chrome Web Store. This method will work with ...
Read more >Detecting Browser Extensions via Injected Style Sheets
In this paper, we present a new method of fingerprinting browser extensions which, to the best of our knowledge, has never been presented...
Read more >Heads-Up, Chrome Extensions Can Be Used To Track You ...
Heads-Up, Chrome Extensions Can Be Used To Track You With Browser Fingerprinting · Google Chrome logo with a fingerprint in the middle ·...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Yep! I agree, option 1 seems A+ to me
Verification PASSED on
Reproduced the issue in 1.45.127
Reproduced the issue described in https://github.com/brave/brave-browser/issues/26715#issuecomment-1322435253 using 1.45.127
BraveScreenFingerprintingBlockerStudy:Enabled
on brave://version (Release channel has this at 50%, so may need a few attempts to get this enabled)BraveScreenFingerprintingBlockerStudy
is enabled.BraveScreenFingerprintingBlockerStudy
is enabled.Part A of test plan - PASSED
Verified the test plan from https://github.com/brave/brave-browser/issues/26715#issuecomment-1322435253 - Part A:
Using 1.45.131, verified both extensions listed in https://github.com/brave/brave-browser/issues/26715#issuecomment-1322435253 worked as described when
BraveScreenFingerprintingBlockerStudy
is enabled.Part B of test plan - PASSED
Verified the test plan from https://github.com/brave/brave-browser/issues/26715#issuecomment-1322435253 - Part B:
Using 1.45.131, run through the cases from https://github.com/brave/brave-browser/issues/23170#issuecomment-1269026947:
Case 1: 1st launch, no Griffin -
PASSED
Steps:
1.45.131
brave://version
https://dev-pages.brave.software/fingerprinting/farbling.html
Generate fingerprints
This Page
,Local Frame
, andRemote Frame
values were the same for each of the following:Screen resolution
Screen resolution media query
Available screen resolution
https://arthuredelstein.github.io/tracking_demos/screen.html
Confirmed there was no farbling of the screen/window coordinates shown in the screenshot
step 3
step 7
step 9
Case 2: 2nd launch, Griffin-enabled study with Shields enabled-
PASSED
(Continued from
1st launch, no Griffin
test, above) 10. restarted Brave 11. openedbrave://version
12. confirmed in the case you getBraveScreenFingerprintingBlockerStudy:Enabled
(note, study is enabled at 100% on Nightly/Beta but only 50% on Release, so when testing on 1.45.x please be aware you may need a few attempts to get this study enabled) 13. loadedhttps://dev-pages.brave.software/fingerprinting/farbling.html
14. clicked onGenerate fingerprints
16. loadedhttps://arthuredelstein.github.io/tracking_demos/screen.html
17. moved the mouse around and examined the tracked coordinatesConfirmed the values for
This Page
were different fromLocal Frame
andRemote Frame
(which were both the same); the only four (4) trackable events were themouseEvent.client(X/Y) coordinates
step 11
step 13
step 16
Case 3: 2nd launch, Griffin-enabled study with Shields disabled-
PASSED
Generate fingerprints
Confirmed all values were the same; no farbling was applied
brave://version
shields down
farbling.html
screen.html
Case 4: relaunch, default/no study -
PASSED
(Continued from
1st launch, no Griffin
test, above) 10. restarted Brave 11. openedbrave://version
12. confirmed in the case whereBraveScreenFingerprintingBlockerStudy:Default
(note, study is enabled at 100% on Nightly/Beta but only 50% on Release - this means I had to disablebrave://flags#brave-block-screen-fingerprinting
to test this on Nightly however when testing on Release 1.45.x please be aware you may need a few attempts to get this study as “Default”.) 13. loadedhttps://dev-pages.brave.software/fingerprinting/farbling.html
14. clicked onGenerate fingerprints
15. loadedhttps://arthuredelstein.github.io/tracking_demos/screen.html
16. moved the mouse around and examined the tracked coordinatesConfirmed there was no farbling of the screen/window coordinates shown in the screenshot
step 11
step 14
step 16