kuber.studio

Security and privacy

browser fingerprinting demo

SHOW HN2026

26points
28comments
#1,753of 4,366 in 2026
Top 41%of 2026 by points

How HN took it

RoastedHalf or more of the comments are critical

4 positive, 1 neutral or asking, 0 mixed, 14 critical, out of 19 comments about the project. Thread score -0.43.

Execution: 1 for, 10 againstPrivacy: 1 for, 3 againstIdea: 2 for, 1 against

The thread, comment by comment

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

What HN said

What people liked

  • Clever technical demo of cookieless tracking

    From 3 comments
    • This is such a clever technical demo. Do you work for Posthog? LOL
      cvince on HN
    • Good demo of the gap between "no cookies" and "no tracking". A chunk of the analytics industry sells "cookieless" where under the hood it's exactly this - a fingerprint doing the…
      yev76 on HN
    • Excellent! Thanks! It got me thinking, is there any way people can defend from this privacy abuse?
      olek1983 on HN
  • Shows the gap between no cookies and no tracking

    From 1 comment
    • Good demo of the gap between "no cookies" and "no tracking". A chunk of the analytics industry sells "cookieless" where under the hood it's exactly this - a fingerprint doing the…
      yev76 on HN

Objections

  • Many reported details are wrong (CPU, display resolution, OS, timezone, battery)

    From 5 comments
    • > "Your CPU is ARM-family — we know from a single subtraction" Not sure what went wrong for you but I'm running an i9 > "Your battery is at 100%" I don't think my desktop…
      voidUpdate on HN
    • Fun site, but it got some things wrong: - 8 core cpu. I have 24. - devtools open. they are not. - primary language. this one is strange, because I'd think the browser declares it…
      eisleggje on HN
    • > Nice machine, by the way. an Apple M1. > 2 CPU cores and a 1920×1200 display. All the bells and whistles. i'm actually using a macbook neo and my display resolution is not…
      znpy on HN
    • TZ wrong. Screen resolution wrong. 3200x2200? How does it come up with that?
      LargoLasskhyfv on HN
    • I was surprised that it only detected very basic details about me.. and most importantly, it got the display resolution completely wrong!
      pkphilip on HN
  • Linux and Windows detection conflicts; OS guesses are inaccurate

    From 3 comments
    • > What you are using it on > > Your display scaling is set to 150%. > A fractional device pixel ratio (1.5) only comes from Windows display scaling. macOS uses whole-number…
      madiling on HN
    • Just tested this. > Your User-Agent says Windows, but your installed fonts are Linux's. One of those is lying, and it isn't the fonts. But also... > Voice list = Microsoft David…
      zinekeller on HN
    • Same issue here. Pixel ratio 1.25 on Linux, Firefox.
      dolmen on HN
  • Claims of zero permissions are inaccurate; it requests DRM, WebGL and canvas access

    From 3 comments
    • > It asked for zero permissions. Not quite. It requested to play DRM protected content.
      Clamchop on HN
    • And asked to create a WebGL context and to view canvas data. Closed and reopened the browser and revisited the site a couple times, and it thought it was my first and gave me a…
      hotsalad on HN
    • Fun site, but it got some things wrong: - 8 core cpu. I have 24. - devtools open. they are not. - primary language. this one is strange, because I'd think the browser declares it…
      eisleggje on HN
  • Fingerprint changes between visits, so 'returning visitor' detection is unreliable

    From 3 comments
    • And asked to create a WebGL context and to view canvas data. Closed and reopened the browser and revisited the site a couple times, and it thought it was my first and gave me a…
      hotsalad on HN
    • Fun site, but it got some things wrong: - 8 core cpu. I have 24. - devtools open. they are not. - primary language. this one is strange, because I'd think the browser declares it…
      eisleggje on HN
    • I tried it in different browsers. WebRTC must always be disabled. It’s better to try to work without JS in the browser. Also, the “forget” button worked for one reboot, and then…
      user205738 on HN

Requests

  • Fix inaccurate detections such as OS, CPU and display resolution

    From 3 comments
  • Make fingerprint results deterministic

    From 1 comment
  • Explain how defenses against fingerprinting can work

    From 1 comment
    • Excellent! Thanks! It got me thinking, is there any way people can defend from this privacy abuse?
      olek1983 on HN

Questions

  • How can people defend against this kind of fingerprinting?

    From 1 comment
    • Excellent! Thanks! It got me thinking, is there any way people can defend from this privacy abuse?
      olek1983 on HN
  • How does it derive certain values such as resolution?

    From 1 comment

Category, keywords, summaries and labels on this page were made by AI (Thread Reader v2) and not checked by hand. Each point links to the comments it came from.

Add a badge to your READMEShown on HackerShow
[![Shown on HackerShow](https://hackershow.org/badge.svg)](https://hackershow.org/show/49182352)