I wonder if this took into account GPU render-time fingerprinting? The minute timing differences in how you render an image are still used to identify you.
Recently did a WebGPU project and noticed Firefox polls GPU status on a 100ms timer, so you can't really use it for such as far as I can tell.
That said, Claude figured out that while Canvas copying of a loaded JPEG was out due to fingerprint resistance, it could copy it via WebGPU, so yeah...
see f.e. "Highlight" (Resolved value of the Highlight system colour keyword, as RRGGBB), which has bajillion different values for android - and I can't find the most common ones for linux
I understand that the HN crowd is composed of many different people with radically different interests and opinions, so an "average HN opinion" would be mostly meaningless, but still...
I find it mildly amusing that HN both loudly complains about bots scraping their websites AND is very interested in user privacy.
The conflicting part is that user privacy automatically means that you cede any control over how exactly does the user accesses your resource. Whether they use a web browser or an automated scraper. Any attempt to analyze requests to tie different requests made by the same actor together automatically means privacy violation.
I don't have a good answer to this dilemma yet, I just thought that this is a curious observation and wanted to share.
_factor | an hour ago
magicalhippo | 56 minutes ago
That said, Claude figured out that while Canvas copying of a loaded JPEG was out due to fingerprint resistance, it could copy it via WebGPU, so yeah...
ape4 | an hour ago
NooneAtAll5 | 31 minutes ago
btw, is pixelRatio controllable somehow? how do I set it to 1, most common value?
NooneAtAll5 | 27 minutes ago
> The digitiser's touch-point count, uncollapsed.
my laptop does not have touch screen, why am I not at 0?
NooneAtAll5 | 23 minutes ago
anyone knows why is that?
NooneAtAll5 | 15 minutes ago
see f.e. "Highlight" (Resolved value of the Highlight system colour keyword, as RRGGBB), which has bajillion different values for android - and I can't find the most common ones for linux
vova_hn2 | 14 minutes ago
I find it mildly amusing that HN both loudly complains about bots scraping their websites AND is very interested in user privacy.
The conflicting part is that user privacy automatically means that you cede any control over how exactly does the user accesses your resource. Whether they use a web browser or an automated scraper. Any attempt to analyze requests to tie different requests made by the same actor together automatically means privacy violation.
I don't have a good answer to this dilemma yet, I just thought that this is a curious observation and wanted to share.