34

Amidst the glossy marketing for VPN services, it can be tempting to believe that the moment you flick on the VPN connection you can browse the internet with full privacy. Unfortunately this is quite far from the truth, as interacting with internet services like websites leaves a significant fingerprint. In a study by [RTINGS.com] this browser fingerprinting was investigated in detail, showing just how easy it is to uniquely identify a visitor across the 83 laptops used in the study.

As summarized in the related video (also embedded below), the start of the study involved the Am I Unique? website which provides you with an overview of your browser fingerprint. With over 4.5 million fingerprints in their database as of writing, even using Edge on Windows 10 marks you as unique, which is telling.

top 34 comments
sorted by: hot top controversial new old
[-] otacon239@lemmy.world 9 points 1 month ago

The only real advantage you gain is being able to watch things outside your region. Without lots of work, you’re pretty easily traceable on the modern internet.

[-] Lost_My_Mind@lemmy.world 3 points 1 month ago

I remember in 1996 my neighbor was in one of these fancy new things on the internet called a "chat room".

He got into an arguement with someone. It got heated. Until the other guy threatened to show up at my neighbors house.

My neighbor scoffed and laughed.

Then the guy put in my neighbors real address. To this day, that still scares me. And back then internet crime wasn't taken seriously. In fact doxxing back then may not yet have even been a crime.

[-] pumpkin_spice@lemmy.today 1 points 1 month ago

FYI:

https://www.thefire.org/research-learn/doxxing-free-speech-and-first-amendment

In the US, "doxxing" laws are pretty much state-by-state and many may be violating the first amendment.

[-] Lost_My_Mind@lemmy.world 1 points 1 month ago

Today, yes. In 1996 "doxxing" wasn't a term. The internet was so new to people that nobody knew what it could even do.

I'll give you a great example. I remember watching a news report fall of 2000, where K*B Toys was trying this untested idea. Could they use the internet to sell things? The experts said no, and that the internet was a fad. It simply wasn't a medium you could use for commercial things......ebay aside.

In 1996 Google didn't even exist yet. I don't think Amazon was even a bookstore yet. The internet in those days was primitive, and the wild west of the technology realm.

[-] ronigami@lemmy.world 1 points 1 month ago* (last edited 1 month ago)

Most vendors are not going to trace you like that. They can, but it’s actually kind of nontrivial and not “easy.”

[-] Amoxtli@thelemmy.club 4 points 1 month ago

This is why you use a separate browser for different activities and don't cross contaminate.

[-] afox@lemmy.world 3 points 1 month ago

Good luck I'm behind 7 proxies

[-] undefined@lemmy.hogru.ch 0 points 1 month ago

I’m here with multi-hop VPN with the first two hops staying in-country and the rest all random + a shit load of DNS blocking lists and browser extensions + blocking Google. I use different VPN providers too. I’m also introducing variable delays to my traffic to make NetFilter data less helpful.

[-] GreenShimada@lemmy.world 1 points 1 month ago

Please understand that browser extensions make you more easy to track. I used to be under the same assumption, but uBO is as far as you should go. fingerprints include your extensions.

[-] io@piefed.blahaj.zone 2 points 1 month ago

here is a fingerprinting test you can trust https://coveryourtracks.eff.org/

fingerprinting is nasty, i suggest canvas blocker extension because it gives them fake readouts

[-] lol_idk@piefed.social 2 points 1 month ago

If the NSA wants you, they will get you. But I can hide from most of you with just a little email relay and a VPN

[-] Quazatron@lemmy.world 1 points 1 month ago

I'm not looking to be anonymous, I want access to Stargate Atlantis that Amazon Prime is geo blocking from me.

For that, VPN works as advertised.

[-] GreenShimada@lemmy.world 1 points 1 month ago

It's always kind of funny when the Technology folks wade into well-researched and well-worn Privacy territory.

Do you want to not wave a giant flag of your activity to Google, Meta, MS, and your ISP when you do literally anything online? Either use a VPN and Mullvad (or Librewolf, but YMMV) browser, OR a VPN and Tor OR Tor with an https bridge if paying for a VPN will make you a target (Tor bridges are not for casuals, save them for those in genuine need).

VPN locations need to be changed. Frequently. Router level VPN at home becomes your "This is me" location, then make use of VPNs on each device when you want an extra layer of obfuscation.

There's not a lot of middle ground at this point, and it's not difficult.

[-] artyom@piefed.social 0 points 1 month ago

Router level VPN at home becomes your "This is me" location

You and a thousand other people.

[-] magguzu@lemmy.pt 1 points 1 month ago

Yeah, but fingerprinting is effective by cross referencing.

There are 1,000 people with the IP 1.2.3.4

There are 500 people with the IP 1.2.3.4 using Firefox

There are 25 people with the IP 1.2.3.4 using Firefox with a 1440p screen

There are 2 people with the IP 1.2.3.4 using Firefox with the dark reader extension with a 1440p screen at 75Hz

etc.

So rotating the IP can screw with that.

[-] Blackfeathr@lemmy.world 0 points 1 month ago* (last edited 1 month ago)

Does that mean my ISP can still detect if I'm going to websites they don't approve of if I'm using Mullvad as my VPN but using Firefox as my browser?

[-] A_Random_Idiot@lemmy.world 2 points 1 month ago* (last edited 1 month ago)

No, with a VPN the only thing your ISP sees is you connecting to a VPN server IP.

But browser finger printing, on the other hand, can identify you to every website you visit, due to info your browser hands over to every website... Such as OS version, Resolution, installed Plugins, browser settings, geolocation info, etc..which is often unique enough to identify you out of the whole of the internet.

Ironically, locking your browser down with more security features/settings/plugins often makes you more identifiable. Cause capitalism is god damned sure they are gonna track you and monetize the hell out of your information, whether its via your name, your user name, or just your digital fingerprint.

https://coveryourtracks.eff.org/

[-] WolfLink@sh.itjust.works 1 points 1 month ago

Your ISP can’t tell who you are contacting if you are using a VPN, but websites will track you by other means.

[-] Blackmist@feddit.uk 1 points 1 month ago

Every time I use that site it says I am unique. So is that good? Surely if I was trackable, it would match me against the previous times I'd been there.

Or maybe the site is just spouting a load of clickbaity nonsense?

[-] PumaStoleMyBluff@lemmy.world 1 points 1 month ago

Yes, your browser is probably generating brand new canvas and other fingerprints every visit, which is a good thing.

[-] realitista@lemmus.org 0 points 1 month ago

Does anyone know if Firefox's claimed Anti fingerprinting technology is any good?

[-] mybuttnolie@sopuli.xyz -1 points 1 month ago

it's useless. test it out with creepjs

[-] ikidd@lemmy.world 0 points 1 month ago

What a pointless article.

[-] FE80@lemmy.world 0 points 1 month ago

Librewolf + uBlock Origin + Privacy Badger + containerise

For the comedy extra point, a user agent switcher can actively lie about your browser & OS.

[-] W3dd1e@lemmy.zip 3 points 1 month ago* (last edited 1 month ago)

Using a browser like Librewolf is, itself a unique identifier bc not enough people are using it.

EFF has a tool that lets you check your “uniqueness” and bc I used a lesser known browser, it was easier to track me.

Not that I mean you shouldn’t use it. I just wanted to clarify that it doesn’t make you safe from ads. :(

[-] FE80@lemmy.world 2 points 1 month ago

https://coveryourtracks.eff.org/ is the EFF tool.

My results say that I have strong protections against tracking, and that my browser is unique. It's as good as I can get.

The agent switcher also tells the world my Librewolf on Linux is Chrome on Windows.

[-] mirshafie@europe.pub 3 points 1 month ago

Isn't it a bad thing to be unique in this context? If my browser is 1 in a million, that means that a tracker can pick me out of a lineup of a million users, no? That's why a captcha can verify you as human simply by checking a box, because it can identify your unique browser as associated with human activity.

If I'm not mistaken, we want the opposite. We want our browsers to be as generic as possible if we don't want to be tracked.

[-] Jyek@sh.itjust.works 1 points 1 month ago

I would think unique means you appear as a never before seen individual and not one they can identify from their fingerprint history. If you fingerprint twice and both are unique, you are secure.

[-] hodgepodgin@lemmy.zip 1 points 1 month ago

This breaks most websites you’ll visit. Just to keep in mind to others considering locking their browser down.

[-] Chivera@lemmy.world 0 points 1 month ago

I bought a used laptop from a yard sale and only use public Wi-Fi and never use the laptop for anything with my name on it.

[-] CluckN@lemmy.world 1 points 1 month ago

Pfft amateur, I break into my local Applbee’s after 2AM and use their POS terminal browser to look at used cars.

[-] bytesonbike@discuss.online 1 points 1 month ago

Applebee's at 2AM which leaves a physical trail? Noob. I strap meshtastic nodes on wild dogs, using them as a Internet relay at 1-2kb a second, to look at manga leaks.

[-] realitista@lemmus.org 0 points 1 month ago

Does anonymous mode browsing+VPN improve this? I would think it would

[-] cmnybo@discuss.tchncs.de 5 points 1 month ago

You can't hide or get rid of the browser fingerprint, but some addons can help to randomize it so it looks like you're using a different device every time you visit a site.

this post was submitted on 20 Nov 2025
34 points (90.5% liked)

Technology

77843 readers
1229 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS