valve1
Joined 5 years ago
Karma
135
Submissions
14
Member since
Mar 23
CTO at Fingerprint.com
View on Hacker NewsRecent submissions
Comment · 6 months ago
We don't use vulnerabilities in our products.
Comment · 5 years ago
Thanks for testing it on Windows. We mostly tested it on MacOS Big Sur because all devs on the team have that OS.
With Windows different timings might be needed, we'll check into it tomorrow.
Comment · 5 years ago
yeah, chrome/chromium on linux not tested at all, mostly because nobody on the team is using linux. We tested it on MacOS Big Sur and a bit of Windows.
Full table of what was tested here: https://github.com/fingerprintjs/external-protocol-flooding#... dathinab
Comment · 5 years ago
Thanks for testing it on Linux. We only tested it on these browser + OS combinations: https://github.com/fingerprintjs/external-protocol-flooding#...
Comment · 5 years ago
On Tor we show a fake captcha on the demo, which allows to collect multiple key presses and use each as a user-provided trigger.
Comment · 5 years ago
Thanks for testing this on Opera, we only tested on these browser/OS combinations: https://github.com/fingerprintjs/external-protocol-flooding#...
Comment · 5 years ago
Windows can sometimes say you have Skype, because it comes bundled even if you didn't install it yourself.
Comment · 5 years ago
Yeah, we tested it on MacOS Big Sur mostly. Nobody on the team had linux so we didn't really test there.
It can be made to work with better timings for the measurements etc.
Comment · 5 years ago
Browsers open pop-ups to ask "Can I run that application?" but only if that application is installed. If that application is not installed, the browser will ignore the custom URL.