panopticlick thread

Disable flash and js and you'll be fine, as those 2 leak such info. If you cant live without them, work from a sandboxed ebvironment such as a VM or only used cached links of websites, such as archive.is

>most common user-agents
Latest version of Chrome for Windows 7/8/10. Chrome for Android would be pretty common as well but it would be unwise to spoof your desktop/laptop as a phone since there are ways to tell (e.g. you can just check if vibration is available), not to mention websites will serve you the mobile version if available.

>System fonts
The default ones for Windows.

If you use Linux you could install Windows 10 in a VM, move the default fonts out of it and place them in a new directory in /usr/share/fonts (run fc-fache to update font cache), then use firejail to blacklist the paths of the other fonts so your browser can't see them. I believe for Windows, Sandboxie allows you to blacklist paths as well so you should blacklist the paths of the non-default fonts.

>>58986707
I will try this.
firejail seems pretty awesome

File: 73435.png (28KB, 186x208px) Image search: [Google]

28KB, 186x208px

>>58986707
I tried blocking pretty much every file in the following directories:

/usr/share/fonts/
/usr/share/fontconfig/
/usr/share/ghostscript/fonts
/etc/fonts/
/etc/X11/fonts
/boot/grub/fonts /*KEK*/

Panopticlick is still able to know what fonts I have installed.
What other directories should I blacklist?

>>58989139
Your system doesn't use the fonts directly, it uses the font cache, when you add new fonts the cache gets rebuilt :)

>>58989189
How can I fool firefox then?

>>58989278
Turns out Firefox is actually working on a way to control which font the browser can access:
https://www.deepdotweb.com/2017/01/13/firefox-52-adds-tor-like-font-whitelist-prevent-fingerprinting-os-fonts/