Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't fully reproduce with Firefox 85 #2

Closed
AlphaJack opened this issue Feb 7, 2021 · 5 comments
Closed

Can't fully reproduce with Firefox 85 #2

AlphaJack opened this issue Feb 7, 2021 · 5 comments

Comments

@AlphaJack
Copy link

I can't reproduce my IDs with Firefox 85 (Linux). I don't know if it is related to this, they only mention cross-site supercookie protection.

Chromium 88 seems to be still vulnerable.
Tabs underlined in blue are part of the same container (Firefox extension), others (left to right) are vanilla Firefox, private Firefox and vanilla Chromium.

First try:
first-run

After restarting my browsers:
second-run

@arobase-che
Copy link

Can't totaly reproduce on Firefox 85.
Works when I check my id a second time. Failed to retrieve it if I close Firefox.

I got the option "Delete cookies and site data when Firefox is closed".

@pachainti
Copy link

Firefox 85 provides supercookies protections. You have to close and restart the browser.

@jonasstrehle
Copy link
Owner

jonasstrehle commented Feb 7, 2021

I can't reproduce my IDs with Firefox 85 (Linux). I don't know if it is related to this, they only mention cross-site supercookie protection.

Seems like the latest version of Firefox (v85.0 under Linux) is no longer vulnerable to this attack scenario. Good to know, thank you!

@jonasstrehle jonasstrehle pinned this issue Feb 7, 2021
@evoactivity
Copy link

I can't reproduce for Firefox 85 (Windows), the demo gives me different id's

@pachainti
Copy link

Please read here.

@jonasstrehle jonasstrehle unpinned this issue Feb 14, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants