Assuming one wants to be able to access a site from one device without the site realizing that the same device has visited multiple times, what are all the identifiers that one would have to consider/that could be used to identify?
I'm trying to make a relatively complete list of any viable methods that could/are likely to be used.
So far I have: -IPv4 -IPv6 -Screen resolution -Installed fonts -User agent -WebGL hash -Canvas Hash -Cookies -Installed plugins -Flash on/off -Do not track on/off
I'm not sure how viable it is for a site to secretly install permanent trackers that record things like MAC address, installed software, registry configuration and other particularly damning identifiers.
And if I may ask a follow-up question, would using a virtual machine completely protect the host device from identification?