Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 1 down vote favorite

Let's say I've found a way to produce a unique string for each and every browser using pure Javascript (which makes it an alternative to UA strings).

Now what I'd like to know is what are potential uses of this alternative to UAs?

I'm going to release it as an open-source project but before releasing it, I should know its potential use cases and maybe some missing features from this project.

[EDIT:]

Here is what's going on in details:

  1. I've written some scripts which scan client's browser about 400ms
  2. After scanning, the script produces a MD5 string
  3. This MD5 is almost unique in 86.4% of different browser/OS combinations (the percentage is a result of my tests of this project under nearly 170 browsers available at Browsershots)
  4. This percentage makes the project perfect for detecting spoofed User-Agent strings

Here is what I'm looking for:

  1. What are this project's potential use cases?
  2. Is there anything more you (as an IT security specialist) expect from such project? (I mean something beyond MD5 generation)
share|improve this question
3  
Do you want to tracker user agents (e. g. to create HTML/CSS/JS code they understand) or users? In the first case, there is the navigator object. For the second case, you might want to have a look at Panopticlick. In any case, please edit your question to make that clearer. – Hendrik Brummermann♦ Aug 13 '12 at 9:21
@HendrikBrummermann The navigator object can get manipulated easily (in Chrome's console for example). Panopticlick's project is quite exciting but all of their tested parameters can be easily manipulated and spoofed. The way I produce these unique strings can't get spoofed. – user1591844 Aug 13 '12 at 10:43
1  
@user1591844 how can we tell whether your project has missing features if we know (almost) nothing about it? – Andrey Botalov Aug 13 '12 at 11:20
@AndreyBotalov I've already told you, my script simply generates a unique string for each browser and surprisingly different strings for different OSs. that simple. I'd like to know its potential uses. – user1591844 Aug 13 '12 at 11:49
1  
It sounds like you're describing something similar to this: eff.org/deeplinks/2010/01/tracking-by-user-agent – Andy Smith Aug 13 '12 at 12:14
show 2 more comments

closed as not a real question by AviD♦ Aug 13 '12 at 12:52

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.