For a while I've been using a browser extension that returns a fake canvas value to websites that request it. This ensures fewer sites are able to track me, especially ones that use something like FingerprintJS, which is able to track the same browser whether you're in incognito or if you're using a VPN. It is also less disruptive than something like noscript as it allows some javascript. Unfortunately, there are a few 'anti-scraping' tools, such as Distil Networks, that now flag me as a bot. For instance on the review website, G2.
- Nope, I landed on that page from a google search
- Nope, I still allow JS and cookies.
- Nope, not using Ghostery or NoScript.
But, I am returning a fake value for their canvas fingerprint requests. I guess they check to validate it is a resonable fingerprint. Turning it off and the site loads.
TODO: Create an extension that does a better job faking the canvas fingerprint.
"Why not just use Brave?! They block fingerprints!"
Distil is used by a fair number of websites. So if you want to browse them you'll need to let them track you. There are a few other things you can do to avoid them, but you still got to let them track you. But, that is a later post.
PS. If you've got an extension that obfuscates canvas but still passes Distil lemme know! Author Name @ Domain. 😘