CanvasBlocker/README.md

34 lines
2.5 KiB
Markdown
Raw Normal View History

2015-12-07 16:42:03 +01:00
This add-on allows users to prevent websites from using the Javascript <canvas> API to fingerprint them. Users can choose to block the <canvas> API entirely on some or all websites (which may break some websites) or just block or fake its fingerprinting-friendly readout API. More information on <canvas> fingerprinting can be found at http://www.browserleaks.com/canvas.
The different block modes are:
<ul>
<li>block readout API: All websites not on the white list or black list can use the &lt;canvas&gt; API to display something on the page, but the readout API is not allowed to return values to the website.</li>
<li>fake readout API: Canvas Blocker's default setting, and my favorite! All websites not on the white list or black list can use the &lt;canvas&gt; API to display something on the page, but the readout API is forced to return a new random value each time it is called.</li>
2016-11-03 17:49:48 +01:00
<li>fake at input: on display of text the drawn pixels get modified slightly. This makes the detection of the add-on harder but is less secure. On WebGL-canvas the behaviour is identical to "fake readout API".</li>
2015-12-07 16:42:03 +01:00
<li>ask for readout API permission: All websites not on the white list or black list can use the &lt;canvas&gt; API to display something on the page, but the user will be asked if the website should be allowed to use the readout API each time it is called.</li>
<li>block everything: Ignore all lists and block the &lt;canvas&gt; API on all websites.</li>
<li>allow only white list: Only websites in the white list are allowed to use the &lt;canvas&gt; API.</li>
<li>ask for permission: If a website is not listed on the white list or black list, the user will be asked if the website should be allowed to use the &lt;canvas&gt; API each time it is called.</li>
<li>block only black list: Block the &lt;canvas&gt; API only for websites on the black list.</li>
<li>allow everything: Ignore all lists and allow the &lt;canvas&gt; API on all websites.</li>
</ul>
2017-09-24 00:06:03 +02:00
2018-09-05 16:42:57 +02:00
Protected "fingerprinting" APIs:
* canvas 2d
* webGL
* audio
* history
* window (disabled by default)
* DOMRect
2017-09-24 00:06:03 +02:00
Special thanks to:
* spodermenpls for finding all the typos
2018-05-27 00:10:06 +02:00
* Thorin-Oakenpants for the icon idea
* anthologist for the Italian translation
* Maleficient for the French translation
2018-08-21 22:01:31 +02:00
* yfdyh000 for the Chinese translation
* micrococo for the Spanish translation
2018-10-16 00:13:19 +02:00
* STim99 for the Russian translation
2018-06-05 08:30:19 +02:00
If you want to support this addon you can donate to the following bitcoin address:
159Y9BLcfHyrp6wj6f3syEuk92xkRVTiie