Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

How can I block Flash, at least in Chrome, from obtaining the list of available fonts in my browser? It seems that the combination of fonts available is the easiest way to fingerprint a browser.

share|improve this question

closed as off-topic by Eric G, Gilles, TildalWave, Xander, Steve Mar 23 at 3:42

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – Eric G, Gilles, TildalWave, Xander, Steve
If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer 1

Use the open source Flash/SWF player - LightSpark.


If LightSpark currently provides only a Mozilla browser plugin, encourage the developers to port to Chrome, or port it yourself.

If LightSpark doesn't currently have a toggle for disabling or anonymizing font information, upload a patch to the project, or encourage the project developers to do so.

share|improve this answer
    
This may seem a high-effort solution, but if we encourage this project - we could eventually end-up with full user empowerment over Flash execution in browsers. A security plus in my book. –  LateralFractal Oct 3 '13 at 4:40
    
Thanks, but that's a solution for the future, besides, Flash will probably be completely dead before we end up "with full user empowerment over Flash execution in browsers". –  Gaia Oct 3 '13 at 16:12

Not the answer you're looking for? Browse other questions tagged or ask your own question.