[v8-users] Potential high entropy fingerprint issue - potential big privacy concern

2022-11-07 Thread Filip Petronijevic
Hello, during my academic research I came across one website which has very disturbing levels of fingerprinting. It manages to detect that I come from same device despite me hooking, randomizing and changing more then 850 >0.0 entropy values. Including using VPN connection or proxies. I found th

[v8-users] Re: Potential high entropy fingerprint issue - potential big privacy concern

2022-11-08 Thread Filip Petronijevic
First of all, thank you for responding back! I'm well aware of very broad commercial and non commercial fingerprintable methods including those that you have posted, but nothing like that is what they are doing. As previously said, they seem to be doing something very weird as even swapping hund

[v8-users] Tracing object properties from HiddenClass

2022-11-09 Thread Filip Petronijevic
Ok, I'll explain what problem I have and if there is any way of solving it. Imagine I have following Javascript code: var obj1= {} obj1["mainkey"] = {canvasComputed: "oewrewqioewrerqewjoijiqerw", todata: "somerandomdata"} var obj2= {} obj2["mainkey"] = "some big string" var obj3 = {} obj3['m

Re: [v8-users] Tracing object properties from HiddenClass

2022-11-11 Thread Filip Petronijevic
-ic" > --renderer-cmd-prefix="xterm -e gdb -args" > - bring a large amount of patience to both of these steps, and have enough > RAM in your machine (64GB is good, dunno if 32GB is enough) > > Good luck! > > > On Wed, Nov 9, 2022 at 3:19 PM Filip Petronijevic

Re: [v8-users] Tracing object properties from HiddenClass

2022-11-11 Thread Filip Petronijevic
this in Chrome, not just d8, so the full workflow is: >>> - build a Debug build of Chrome. Be sure to set v8_optimized_debug = >>> false in args.gn beforehand. >>> - run with each renderer in a debugger: out/debug/chrome --no-sandbox >>> --disable-hang-monitor --disab

Re: [v8-users] Tracing object properties from HiddenClass

2022-11-11 Thread Filip Petronijevic
se a given map will actually be helpful. A possible way to >>>>> intercept >>>>> creation of properties with a given name (e.g. "mainkey") would be to run >>>>> with `--nouse-ic` and put a breakpoint on StoreIC::Store(). This is >>>