Security News
PyPI Introduces Digital Attestations to Strengthen Python Package Security
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
fingerprintjs2
Advanced tools
Original fingerprintjs library was developed in 2012, it's now impossible to evolve it without breaking backwards compatibilty, so this project will be where all the new development happens.
This project will use significantly more sources for fingerprinting, all of them will be configurable, that is it should be possible to cherry-pick only the options you need or just enable them all.
I'm also paying special attention to IE plugins, popular in China, such as QQ, Baidu and others.
This project will not be backwards compatible with original fingerprintjs.
This project uses semver
.
//cdn.jsdelivr.net/npm/fingerprintjs2@<VERSION>/dist/fingerprint2.min.js
or https://cdnjs.com/libraries/fingerprintjs2
bower install fingerprintjs2
npm install fingerprintjs2
yarn add fingerprintjs2
new Fingerprint2().get(function(result, components) {
console.log(result) // a hash, representing your device fingerprint
console.log(components) // an array of FP components
})
Note: You should not run fingerprinting directly on or after page load. Rather, delay it for a few milliseconds to ensure consistent fingerprints. See #307, #254, and others.
var options = {swfPath: '/assets/FontList.swf', excludeUserAgent: true}
new Fingerprint2(options).get(function(result) {
console.log(result)
})
Full list of options will be in the (https://github.com/Valve/fingerprintjs2/wiki/List-of-options) wiki page.
Flash font enumeration is disabled by default. JS code is used by default to get the list of available fonts.
The reason for this is that Flash will not work in incognito mode.
However, you can make the library to use Flash when detecting the fonts with:
excludeJsFonts: true
option.
To use Flash font enumeration, make sure you have swfobject available. If you don't, the library will skip the Flash part entirely.
detectScreenOrientation
option is true
by defaultTo ensure consistent fingerprints when users rotate their mobile devices.
new Fingerprint2().get(function(result, components) {
// this will use all available fingerprinting sources
console.log(result)
// components is an array of all fingerprinting components used
console.log(components)
})
userDefinedFonts
optionWhile hundreds of the most popular fonts are included in the extended font list, you may wish to increase the entropy of the font fingerprint by specifying the userDefinedFonts
option as an array of font names, but make sure to call the Fingerprint function after the page load, and not before, otherwise font detection might not work properly and in a result returned hash might be different every time you reloaded the page.
new Fingerprint2({
userDefinedFonts: ["Nimbus Mono", "Junicode", "Presto"]
}).get(function(result, components) {
console.log(result)
})
preprocessor
optionFunction that is called with each component value that may be used to modify component values before computing the fingerprint. For example: strip browser version from user agent.
new Fingerprint2({
preprocessor: function(key, value) {
if (key == "user_agent") {
var parser = new UAParser(value); // https://github.com/faisalman/ua-parser-js
var userAgentMinusVersion = parser.getOS().name + ' ' + parser.getBrowser().name
return userAgentMinusVersion
} else {
return value
}
}
}).get(function(result, components) {
// user_agent component will contain string processed with our function. For example: Windows Chrome
console.log(result, components)
});
You can view your browser fingerprint locally by starting a webserver and viewing the index.html
page.
Loading index.html
from the filesystem won't work due to Flash's ExternalInterface security restrictions.
To start a web server you can try using one of the following:
Ruby 1.9.2+
ruby -run -e httpd . -p 8080
Python 2.x
python -m SimpleHTTPServer 8080
Python 3.x
python -m http.server 8080
PHP 5.4+
php -S 0.0.0.0:8080
By default, JS font detection will only detect up to 65 installed fonts. If you want to improve the font detection,
you can pass extendedJsFonts: true
option. This will increase the number of detectable fonts to ~500.
On my machine (MBP 2013 Core i5) + Chrome 46 the default FP process takes about 80-100ms. If you use extendedJsFonts
option this time will increase up to 2000ms (cold font cache).
This option can incur even more overhead on mobile Firefox browsers, which is much slower in font detection, so use it with caution on mobile devices.
To speed up fingerprint computation, you can exclude font detection (~ 40ms), canvas fingerprint (~ 10ms), WebGL fingerprint (~ 35 ms), and Audio fingerprint (~30 ms).
(in no particular order)
FontList.swf
file:bin/
directory to your $PATH
(mxmlc binary should be in path)make
https://player.vimeo.com/video/151208427
FAQs
Warning! The library is renamed to @fingerprintjs/fingerprintjs. See https://github.com/fingerprintjs/fingerprintjs to get updates.
The npm package fingerprintjs2 receives a total of 51,499 weekly downloads. As such, fingerprintjs2 popularity was classified as popular.
We found that fingerprintjs2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.