Screen fingerprinting protection is applied to extensions pages
See original GitHub issueFirst reported here: https://twitter.com/AaronToponce/status/1590038533963538432
I was able to confirm that the extension pop-up for Bitwarden is half size when screen fingerprinting protection is enabled. It appears this is because the browser is lying about the size of the screen to the popup page, which has a chrome-extension:// address. We should not apply this protection to such extension pages.
Issue Analytics
- State:
- Created 10 months ago
- Reactions:6
- Comments:6 (2 by maintainers)
Top Results From Across the Web
Google Chrome extensions can be fingerprinted to track you ...
To track users on the web, it is possible to create fingerprints, or tracking hashes, based on various characteristics of a device connecting ......
Read more >How anti-fingerprinting extensions tend to make fingerprinting ...
Browser extensions claiming to protect against fingerprinting will typically result in more data available for fingerprinting.
Read more >Google Chrome Extensions Can Be Fingerprinted to Track ...
The Extensions Fingerprints site only works with Chromium browsers installing extensions from the Chrome Web Store. This method will work with ...
Read more >Detecting Browser Extensions via Injected Style Sheets
In this paper, we present a new method of fingerprinting browser extensions which, to the best of our knowledge, has never been presented...
Read more >Heads-Up, Chrome Extensions Can Be Used To Track You ...
Heads-Up, Chrome Extensions Can Be Used To Track You With Browser Fingerprinting · Google Chrome logo with a fingerprint in the middle ·...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found

Yep! I agree, option 1 seems A+ to me
Verification PASSED on
Reproduced the issue in 1.45.127
Reproduced the issue described in https://github.com/brave/brave-browser/issues/26715#issuecomment-1322435253 using 1.45.127
BraveScreenFingerprintingBlockerStudy:Enabledon brave://version (Release channel has this at 50%, so may need a few attempts to get this enabled)BraveScreenFingerprintingBlockerStudyis enabled.BraveScreenFingerprintingBlockerStudyis enabled.Part A of test plan - PASSED
Verified the test plan from https://github.com/brave/brave-browser/issues/26715#issuecomment-1322435253 - Part A:
Using 1.45.131, verified both extensions listed in https://github.com/brave/brave-browser/issues/26715#issuecomment-1322435253 worked as described when
BraveScreenFingerprintingBlockerStudyis enabled.Part B of test plan - PASSED
Verified the test plan from https://github.com/brave/brave-browser/issues/26715#issuecomment-1322435253 - Part B:
Using 1.45.131, run through the cases from https://github.com/brave/brave-browser/issues/23170#issuecomment-1269026947:
Case 1: 1st launch, no Griffin -
PASSEDSteps:
1.45.131brave://versionhttps://dev-pages.brave.software/fingerprinting/farbling.htmlGenerate fingerprintsThis Page,Local Frame, andRemote Framevalues were the same for each of the following:Screen resolutionScreen resolution media queryAvailable screen resolutionhttps://arthuredelstein.github.io/tracking_demos/screen.htmlConfirmed there was no farbling of the screen/window coordinates shown in the screenshot
step 3step 7step 9Case 2: 2nd launch, Griffin-enabled study with Shields enabled-
PASSED(Continued from
1st launch, no Griffintest, above) 10. restarted Brave 11. openedbrave://version12. confirmed in the case you getBraveScreenFingerprintingBlockerStudy:Enabled(note, study is enabled at 100% on Nightly/Beta but only 50% on Release, so when testing on 1.45.x please be aware you may need a few attempts to get this study enabled) 13. loadedhttps://dev-pages.brave.software/fingerprinting/farbling.html14. clicked onGenerate fingerprints16. loadedhttps://arthuredelstein.github.io/tracking_demos/screen.html17. moved the mouse around and examined the tracked coordinatesConfirmed the values for
This Pagewere different fromLocal FrameandRemote Frame(which were both the same); the only four (4) trackable events were themouseEvent.client(X/Y) coordinatesstep 11step 13step 16Case 3: 2nd launch, Griffin-enabled study with Shields disabled-
PASSEDGenerate fingerprintsConfirmed all values were the same; no farbling was applied
brave://versionshields downfarbling.htmlscreen.htmlCase 4: relaunch, default/no study -
PASSED(Continued from
1st launch, no Griffintest, above) 10. restarted Brave 11. openedbrave://version12. confirmed in the case whereBraveScreenFingerprintingBlockerStudy:Default(note, study is enabled at 100% on Nightly/Beta but only 50% on Release - this means I had to disablebrave://flags#brave-block-screen-fingerprintingto test this on Nightly however when testing on Release 1.45.x please be aware you may need a few attempts to get this study as “Default”.) 13. loadedhttps://dev-pages.brave.software/fingerprinting/farbling.html14. clicked onGenerate fingerprints15. loadedhttps://arthuredelstein.github.io/tracking_demos/screen.html16. moved the mouse around and examined the tracked coordinatesConfirmed there was no farbling of the screen/window coordinates shown in the screenshot
step 11step 14step 16