16

I'm trying to trick the results in this page to have more privacy/anonymity: https://panopticlick.eff.org/index.php?action=log&js=yes

So far the best I could do is change the user agent, with the "User Agent Switcher" plugin.

Any ideas on how to change the other values? Like the plugin details and the system fonts.

Improve this question
2
  • 1
    What are you trying to accomplished by doing this?
    – superuser
    Jun 14, 2012 at 1:14
  • 9
    @David More privacy. Not letting random websites gather every bit of information about you is generally a good idea.
    – HappyDeveloper
    Jun 14, 2012 at 1:20

4 Answers 4

Reset to default
2

There isn't a way to do this yet in Firefox. This is necessary so that the server you are connecting to can know what form to send the content back to you in. The closest analogy I can draw is how SSL sends all of the acceptable connection types (SSL1, TSL, etc.) and the server can pick what it wants to use to communicate. When we are sending all this information to the server we are letting it know that we have these plugins and it can send us content we will be able to use.

If you're concerned about security on your browser, you could use NoScript to block unnecessary scripts from running on your browser. That's means it'll more likely make your browser less "unique".

Improve this answer
9

I know this question is quite old, but when searching for this problem, this is one of the first results.

Short Answer: Set "plugins.enumerable_names" to "" (empty string) on Firefox 29+.

Apparently, from version 29 onwards, Firefox has a setting on about:config that controls the enumerable plugins. It does not solve the problem completely, because it is possible to query individual plugins, but it helps.

This property is "plugins.enumerable_names", and it has a list of allowed prefixes that can be enumerated. So, for the default setting, "Java,Nexus Personal,QuickTime,Shockwave", all plugin names starting with "Java", "Nexus Personal", ... will be enumerated, and all others will be hidden. To hide everything, just clear that string (set it to "").

More info: https://mail.mozilla.org/pipermail/firefox-dev/2013-November/001186.html

UPDATE: As Pointy has mentioned in the comments, this feature has been removed, since it didn't really prevent plugin enumeration (but made it slightly harder).

Here is the bugzilla page for the patch: https://bugzilla.mozilla.org/show_bug.cgi?id=1169945

UPDATE2: After a quick search, it seems like the only thing that prevents plugins from being enumerated is setting them to "Never activate". In the meantime, removing extra plugins and randomizing the user agent might help.

Improve this answer
2
  • 1
    There's no plugins.enumerable_names config property in Firefox 42.
    – Pointy
    Nov 16, 2015 at 20:40
  • Thanks for the warning. It appears they removed because it was pretty much useless (you could still have a list of plugins and test one by one). I'll update the post with what I find in the meantime
    – Daniel Vaz
    Nov 17, 2015 at 22:26
8

For user-agent, you can use "about:config" to create a value called "general.useragent.override" and setting the value to blank (or your favourite user agent).

Setting "plugins.click_to_play" to "true" stops the font enumeration.

"dom.storage.enabled" to "false" might also be useful.

Improve this answer
3
  • This is actually a better answer! The system fonts are read through flash, so "plugins.click_to_play" effectively solves the problem.
    – Memming
    Aug 10, 2013 at 3:45
  • shure about that? i have that value set to true and my fonts stil gt enumerated
    – rhavin
    Nov 18, 2014 at 6:35
  • @rhavin with Javascript, a browser can be tested to see whether it supports a specific font, Javascript won't hand out a full list of system fonts, though.
    – leopld
    Jan 11, 2016 at 18:34
2

fyi, check out this Firefox Addon: Random Agent Spoofer

Improve this answer
3
  • Random Agent Spoofer is the right answer. Because it recently added options to turn off plugin enumeration: github.com/dillbyrne/random-agent-spoofer/issues/283 As an alternative, as showed in Mechazawa's comment in that link, you can use his Greasemonkey or Tampermonkey script (both firefox and chrome) to take care of this without any extension. I can confirm that this shows plugins as "undefined" in the panopticlick test.
    – Spectraljump
    Jul 7, 2016 at 18:04
  • ahh thanks for the info, that userscript is awesome since it works in Chromium also... :) github.com/dillbyrne/random-agent-spoofer/issues/…
    – Motsel
    Jul 12, 2016 at 18:06
  • this plugin no longer exists
    – Zoe stands with Ukraine
    Jun 13, 2020 at 13:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.