On: Audio Fingerprinting using the AudioContext API

[saagarjha]

Turning off WebGL is one bit of entropy, though, while allowing access to the canvas may allow much more.

[pmiller2 → saagarjha]

Not necessarily. Because disabling WebGL is probably relatively rare, while the API itself is fairly ubiquitous, that one bit probably has a high surprisal value, so it carries more information than it would seem to.

[cinquemb → pmiller2]

Yeah, much better to spoof readouts to Canvas, Audio, etc. And this would only be on sites that one would even consider allowing JS to run.