Recent submissions

Comment · 4 years ago
GitHub: https://github.com/z0ccc/extension-fingerprints

Chrome extensions can be detected by fetching their web accessible resources. These are files inside an extension that can be accessed by web pages. The detected extensions can be used to track you through browser fingerprinting.

This website scans over 1000 extensions and shows you the percentage of users that share the same extensions.

Comment · 4 years ago
I don't think that method would work for detecting extension debugging.
Comment · 4 years ago
Doesn't seem like this work for detecting the extension.
Comment · 4 years ago
I'm unsure if that would work for this extension. Do you have a link to an implementation?
Comment · 4 years ago
How can you detect it?
Comment · 4 years ago
How can you detect it? Which websites refuse to activate their features if the debugger is active?
Comment · 4 years ago
What if you're trying to hide your country lol? It also spoofs your locale and user agent. Just because its not something you care about doesn't mean its useless. Also never claimed it was going to change the world or anything. Just thought it was an interesting way to use the debugger api and that some people might find it cool.
Comment · 4 years ago
Comment · 4 years ago
Chrome extensions can be detected by fetching their web-accessible resources. These are files inside an extension that can be accessed by web pages.

Vytal has no web-accessible resources so it can not be detected.

Comment · 4 years ago
Recently made this extension and interested in getting some feedback on it.

Vytal can Spoof your timezone, locale, geolocation and user agent. This data can be used to track you or reveal your location.

Most extensions that provide anti-fingerprinting features rely on content scripts to inject script tags into webpages. There are many limitations to script tag injections which you can read about here: https://palant.info/2020/12/10/how-anti-fingerprinting-exten...

Vytal utilizes the chrome.debugger API to spoof this data. This allows the data to be spoofed in frames, web workers and during the initial loading of a website. It also makes the spoofing completely undetectable.

You can test and compare Vytal and other extensions on https://vytal.io

Unfortunately it doesn't work on Firefox since Firefox doesn't support the debugger API. Works on Brave tho.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton