this post was submitted on 06 Aug 2023
27 points (96.6% liked)

Privacy

31833 readers
161 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

If websites are able to track their users' typing behavior and mouse movements, then the websites may be able to use that data to fingerprint, track, and possibly identify their users. Is this a real privacy risk? If so, what are the methods to counter keyboard and mouse fingerprinting by websites? Note that I do not want to disable JavaScript.

all 6 comments
sorted by: hot top controversial new old
[–] Kissaki@feddit.de 10 points 1 year ago

There are much easier things to fingerprint than user mouse and keyboard behavior. Your browser gives a lot of meta and capability information to the website.

To fingerprint, identify, and distinguish users and people through behavior you'd have to take a probabilistic approach and track enough data long enough.

If you're still concerned and want to prevent it, you'd have to prevent the website from receiving mouse and keyboard events. Use an adjusted browser that would disable or use a browser that can do so through an extension with an extension, to prevent javascript addEventHandler and other interactive elements from receiving interactivity events. Note that this may go as far as having to disable hovering highlights if you want to be thorough.

I wouldn't be too concerned about behavior analysis identification - at least not generally.

[–] adespoton@lemmy.ca 10 points 1 year ago

I have a “JavaScript off by default” approach and things generally work fine for me. I enable system functions on an as-needed basis; most sites don’t need to know what my mouse and keyboard are doing, so I don’t let them. In the rare case where it’s needed, I have it turned on for that particular location.

It takes a few weeks of frustration to set up, but I did this over a decade ago, and I’m down to maybe a site every 3 months or so where I need to tweak something. Usually when something doesn’t work right, I investigate and realize that I shouldn’t be visiting the site in question at all, and should find an alternative source.

[–] peyotecosmico@programming.dev 5 points 1 year ago* (last edited 1 year ago) (1 children)

There's a hidden option in Firefox's about:config if you Google fingerprint Firefox you'll find it.

I tried to turn it on but almost every site worked like it didn't save cookies and asked for captchas.

It became very annoying so I turned it off and just installed another browser for those kind of searches that you don't want to be tracked like Amazon... Totally not pron, I wouldn't do that.

[–] scytale@lemm.ee 3 points 1 year ago

For me, It broke some Apple sites and kept reverting youtube to light mode every time I restarted.

I used to have a piece of software that had a phantoms mouse. You move this phantom pointer to where you want the mouse to be, and middle click (or something, it's been several years), and the real pointer would be moved there on a smooth line movement. It was used to allow an old piece of software to work with windows XP. Could be useful here.

For keyboard, just type in notepad++, then copy and paste into the text field.