Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to trick the results in this page to have more privacy/anonymity: https://panopticlick.eff.org/index.php?action=log&js=yes

So far the best I could do is change the user agent, with the "User Agent Switcher" plugin.

Any ideas on how to change the other values? Like the plugin details and the system fonts.

share|improve this question
1  
What are you trying to accomplished by doing this? – superuser Jun 14 '12 at 1:14
6  
@David More privacy. Not letting random websites gather every bit of information about you is generally a good idea. – HappyDeveloper Jun 14 '12 at 1:20
up vote 2 down vote accepted

There isn't a way to do this yet in Firefox. This is necessary so that the server you are connecting to can know what form to send the content back to you in. The closest analogy I can draw is how SSL sends all of the acceptable connection types (SSL1, TSL, etc.) and the server can pick what it wants to use to communicate. When we are sending all this information to the server we are letting it know that we have these plugins and it can send us content we will be able to use.

If you're concerned about security on your browser, you could use NoScript to block unnecessary scripts from running on your browser. That's means it'll more likely make your browser less "unique".

share|improve this answer

I know this question is quite old, but when searching for this problem, this is one of the first results.

Short Answer: Set "plugins.enumerable_names" to "" (empty string) on Firefox 29+.

Apparently, from version 29 onwards, Firefox has a setting on about:config that controls the enumerable plugins. It does not solve the problem completely, because it is possible to query individual plugins, but it helps.

This property is "plugins.enumerable_names", and it has a list of allowed prefixes that can be enumerated. So, for the default setting, "Java,Nexus Personal,QuickTime,Shockwave", all plugin names starting with "Java", "Nexus Personal", ... will be enumerated, and all others will be hidden. To hide everything, just clear that string (set it to "").

More info: https://mail.mozilla.org/pipermail/firefox-dev/2013-November/001186.html

UPDATE: As Pointy has mentioned in the comments, this feature has been removed, since it didn't really prevent plugin enumeration (but made it slightly harder).

Here is the bugzilla page for the patch: https://bugzilla.mozilla.org/show_bug.cgi?id=1169945

UPDATE2: After a quick search, it seems like the only thing that prevents plugins from being enumerated is setting them to "Never activate". In the meantime, removing extra plugins and randomizing the user agent might help.

share|improve this answer
    
There's no plugins.enumerable_names config property in Firefox 42. – Pointy Nov 16 '15 at 20:40
    
Thanks for the warning. It appears they removed because it was pretty much useless (you could still have a list of plugins and test one by one). I'll update the post with what I find in the meantime – Daniel Vaz Nov 17 '15 at 22:26

For user-agent, you can use "about:config" to create a value called "general.useragent.override" and setting the value to blank (or your favourite user agent).

Setting "plugins.click_to_play" to "true" stops the font enumeration.

"dom.storage.enabled" to "false" might also be useful.

share|improve this answer
    
This is actually a better answer! The system fonts are read through flash, so "plugins.click_to_play" effectively solves the problem. – Memming Aug 10 '13 at 3:45
    
shure about that? i have that value set to true and my fonts stil gt enumerated – rhavin Nov 18 '14 at 6:35
    
@rhavin with Javascript, a browser can be tested to see whether it supports a specific font, Javascript won't hand out a full list of system fonts, though. – leopld Jan 11 at 18:34

fyi, check out this Firefox Addon: Random Agent Spoofer

share|improve this answer
    
Random Agent Spoofer is the right answer. Because it recently added options to turn off plugin enumeration: github.com/dillbyrne/random-agent-spoofer/issues/283 As an alternative, as showed in Mechazawa's comment in that link, you can use his Greasemonkey or Tampermonkey script (both firefox and chrome) to take care of this without any extension. I can confirm that this shows plugins as "undefined" in the panopticlick test. – Tudor Jul 7 at 18:04
    
ahh thanks for the info, that userscript is awesome since it works in Chromium also... :) github.com/dillbyrne/random-agent-spoofer/issues/… – Daps0l Jul 12 at 18:06

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .