![]() By comparing the timing differences you can accurately determine if the protected extensions are installed,” explained z0ccc on the project’s GitHub page. “Resources of protected extensions will take longer to fetch than resources of extensions that are not installed. However, the researcher discovered a ‘Resource timing comparison’ method that can still be be used to detect if the extension is installed. ![]() To prevent detection, z0ccc says that some extensions use a secret token that is required to access a web resource. These resources are typically image files, which are declared using the ‘ web_accessible_resources‘ property in a browser extension’s manifest file.Īn example declaration of web-accessible resources is shown below: "web_accessible_resources": [Īs previously disclosed in 2019, it is possible to use web-accessible resources to check for installed extensions and generate a fingerprint of a visitor’s browser based on the combination of found extensions. When creating a Chrome browser extension, it is possible to declare certain assets as ‘ web accessible resources‘ that web pages or other extensions can access. ![]() Yesterday, web developer ‘z0ccc’ shared a new fingerprinting site called ‘Extension Fingerprints’ that can generate a tracking hash based on a browser’s installed Google Chrome extensions. It is then possible to track a device across sites using the same fingerprinting method.Īlso Read: A beginner’s guide to the Singapore PDPA Fingerprint from installed Chrome extensions These characteristics include GPU performance, installed Windows applications, a device’s screen resolution, hardware configuration, and even the installed fonts. To track users on the web, it is possible to create fingerprints, or tracking hashes, based on various characteristics of a device connecting to a website. Google Chrome Extensions can be Fingerprinted to Track you OnlineĪ researcher has created a website that uses your installed Google Chrome extensions to generate a fingerprint of your device that can be used to track you online.
0 Comments
Leave a Reply. |