"Fingerprint.js PRO" successfully fingerprints Tor Browser
Not affiliated with the site. Demo: https://fingerprintjs.com/demo.
When using Tor Browser 68.3.0esr on macOS Catalina, this site is capable of successfully fingerprinting me across multiple visits with a different identity each time.
Steps to reproduce:
- Visit https://fingerprintjs.com/demo in the Tor Browser.
- Click the "New Identity" button.
- Wait a little bit to avoid timing correlation.
- Revisit the website.
Screenshot of the fingerprinting: https://i.ibb.co/SvWsP4K/image.png.
A potential solution is taking some features from the "Trace" Firefox add-on (not affiliated): https://addons.mozilla.org/en-US/firefox/addon/absolutedouble-trace/. It prevented Fingerprint.js from successfully fingerprinting anything. Every time I created a "New Identity" in the Tor Browser and visited the website, it gave me a new identifier, with no record of my past visits.
When using the Firefox add-on "Canvas Blocker", Fingerprint.js was still capable of identifying me across identities.
Here are the Trace features I have enabled: https://i.ibb.co/BPCbWCk/image.png.
Here are the advanced Trace features I have enabled: https://i.ibb.co/8bmNYxL/image.png.