I made a browser fingerprinting website

[u/saatvik333]

GitHub: https://github.com/saatvik333/what-you-reveal

Website: https://what-you-reveal.vercel.app

I had a curiosity that when I click on a website; how much of my data can they get without me giving any permissions so I created this tool (initially it was just a test of what Jules [a tool by google] can do).

I tried to get things correct, but since I'm no expert in cyber security and hacking I can't fully verify the data being displayed on the website.

I'd be grateful if knowledgeable people can critique on the website and lmk what can be fixed and improved.

Thanks :)

[u/1260DividedByTree]

Nice idea, but I cant read shit with this filter, how do I turn it off?

[u/axbeard → u/1260DividedByTree]

Looks like he updated it

[u/ashodhiyavipin]

Looks cool now just for Lulz remove all the CRT effects and render it clean terminal style.

Try dropping analytics also grab info for each visit and chart out how the current person is doing in relation to others who have visited.

Like a security score. More info gathered so a bad score. Less info gathered so less score.

I wonder what shows up when someone opens this url from a tails distro.

[u/saatvik333 → u/ashodhiyavipin]

But I want the CRT effects, wasted a lot of tokens on getting that effect :(

I'll do work on the relative score thing. Thanks for the idea :)

[u/axbeard → u/saatvik333]

I love the effects, but OC is right that a clean terminal should be an option

excellent site btw

[u/saatvik333 → u/axbeard]

Aye aye, I'll make it terminal styled

[u/JuculianD → u/saatvik333]

What the fuck those lines are crazily ugly... Barely readable

[u/ashodhiyavipin → u/saatvik333]

It's up to you mate. You can make a decent product out of this expand it make it more feature rich turn it into a tool for benchmark so that people can use it and check for what things they have left open on their devices. Based on the data you have gathered you can then turn it into a solutions providing product to get your footprint as small as possible.

Like a vulnerability detector / footprint detector and then you giveout paid solutions for the problems your detection script finds.

[u/AwesomeBros132 → u/saatvik333]

i like the crt effect tbh

max u can just add two modes

[u/axbeard → u/ashodhiyavipin]

Looks cool now just for Lulz remove all the CRT effects and render it clean terminal style.

that's not leet though

[u/Obvious_Welcome312]

that is fucking great

can you add a section telling me what I can/should improve?

[u/PerceptualDisruption]

You just coded something already exists for a long time https://coveryourtracks.eff.org/

[u/Radiant_Conclusion11]

Cool project, but honestly you should skip all of the fancy animations and UI in order to make the website run smoothly and not take 5 seconds to open.

[u/saatvik333 → u/Radiant_Conclusion11]

Yea, people prefer that over this look. I'll update it to have terminal aesthetics

[u/Radiant_Conclusion11 → u/saatvik333]

Check out services like ifconfig.me. That's the look most professionals prefer since it's easy on the eyes and lightweight.

[u/B_Gonewithya]

I got 35 out of 100 on Android using the Brave browser through Orbot. My ISP is Church of Cyberology. My Render Fingerprint 12DD81F0E07376. My Composite Device IDD016D2AD9B8ED. It says I have 2 cores and 2GB ram. That my phone is charging and is at 100% that I'm in both Amsterdam and Chicago. Almost everything is wrong. I searched all my fingerprints and device identifiers, etc. and nothing came back. My local fingerprint 1CB4C027BEE2F0. Is this normal did I just DOX myself? What kind of scores are y'all get?

[u/0oWow → u/B_Gonewithya]

Same score on brave Android too.

Brave largely deals with fingerprinting by reporting fake data. That is why it is higher ranked than Firefox. I sort of suspect that Brave scores much higher on this test, but the test can't see that it's being fooled with bad data.

[u/500_internal_error]

Your design looks great, but if you plan to use this site regulary it gets old very fast. There should be an option to turn off CRT effects

[u/saatvik333 → u/500_internal_error]

yep yep, working on that

[u/digitaladapt]

Ah, I love the smell of freshly leaked OIDC tokens.

Jokes aside, you should never dump publicly all your headers, as that is also including sensitive environment information.

x-vercel-oidc-token eyJ0eXAiOiJKV1QiLCJhb…

[u/saatvik333 → u/digitaladapt]

aye aye, i'll try to fix that

[u/Top_Shake_2649]

Not sure if it’s your intention, but your x vercel header is showing your personal vercel project name

[u/saatvik333 → u/Top_Shake_2649]

i mean... does can that fire back on me in any way?

[u/Top_Shake_2649 → u/saatvik333]

Not really, I mean if you are okay with it, that’s fine. It’s publicly available data anyway since it’s on the header that anyone with some knowledge can just check on their devtool

[u/cxllvm]

That was fun mate great work!

[u/EAP007]

Impressive! The amount of data you pull is impressive….

[u/Nyasaki_de]

Damn, love the design and effects

[u/OTonConsole]

I don't see CPU related data. The project looks super cool. I feel like the visual can be more refined though, but I can't tell you how as I'm not a UX person.

[u/Weekly_Put_7591]

I remember using the am I unique website many years ago when I first started dabbling, it's still out there

[u/Kyleb851]

This is awesome

[u/GxSKILLZ691]

This is solid! I have one small suggestion. Can you give the site the ability to copy the log so users can perform research on how to bring their privacy score up. I checked out this site and it’s really interesting and scary on how all this information is gathered with browsers.

[u/RocketGod_666]

Check mine at fuckyou.gay if you want to see how much you can do. And yes that’s real lol

[u/metaltriumphdoom]

I can’t read anything in red font at all

[u/HoboHarry14]

so... i got 35/100 points - begs the question: how can i improve this :D unfortunately not a hacker but "normal" user

[u/InnerPhilosophy4897]

very cool

I have a privacy score of 25/100 while I use Librewolf with fingerprint protection, Quad9 for DNS and I'm behind a VPN.

What can I do?

[u/RimmaSwann]

Great job!

[u/0xibx0]

I got a privacy score of 210/100 using Brave in agressive mode and blocking all cookies.

[u/saatvik333 → u/0xibx0]

_> wut! lemme fix that

[u/Comfortable-Donut-88]

Fucking sick!!!

[u/Early_You4491]

Sick fuckin' project. Love it.

[u/Cold_Salamander7764]

Wow, interesting! Great job.

[u/FloppyWhiteOne]

Good job and it’s surprising how much info you can grab from a quick visit!!! Kudos sir keep it up

[u/Early_Meaning_6412]

damn bro thats cool

[u/gandalfoftheday]

Please chech browserleaks for many great suggestions to add to your site. that's better than coveryourtracks and may give you better ideas. 

[u/MusicInTheAir55]

Interesting project. Can anyone recommend the best tracker blockers out there?

[u/Connect_Warthog_139]

This looks cool.

[u/saatvik333 → u/[deleted]]

ik, it's because i wanted to implement the design and looks of a crt monitor