Using the CanvasBlocker and WebRTC Control add-ons with Firefox means that the two most unique information points the test extracts from my browser, the hash of canvas and WebGL fingerprints, which are unique for 1 in 200,000 users, changed each time I run the test. Presumably it ought to run several times to check that the data it receives is the same for each test run. I don't currently have a UA switcher, but those would also help reduce the uniqueness of data points only across multiple tests
Between the hash of the canvas fingerprint, and the hash of the webgl fingerprint, unique identification seems inescapable. The reason I don't run additional plugins is because (at least conceptually) the plugin presence itself would be identifying. Given you only need a few relatively low entropy data points (or one or more highly diverse ones) for a huge likelihood of linking a given browser between sites, identifying the presence of any identifiable plugins at all should be sufficient with another factor to ID someone.
If I were running 3rd party javascript in multiple places, I could build a pretty unique personal profile of someone. If I were looking for technical people using Tor, even moreso.
I'm not in ad tech, so am naive to this. The biggest myth on the internet is that nobody actually cares enough to watch what you in particular are doing, when in fact, this changes from nothing to almost total prediction of consumer and political behaviour as soon as someone at a platform company becomes interested.
Now that canvas, webgl, audio is starting to get blocked the most creative solution I have seen so far is css3 transforms with long floating point numbers, seems to create unique values for bounding boxes etc! I spend too much time with fingerprinting because I find it fascinating.
Also maybe sad to point out something far worse if someone chose to track you specifically, if one were to get bid stream data (or even a 1% sample), they would see virtually every website you visit. Sure your cookie/ip/geo/ua etc are less entropy than JS fingerprint (though 1st party google cookie surely knows who most are). this exposes the very core of who you are, what porn you watch and everything.
