How can I block Flash, at least in Chrome, from obtaining the list of available fonts in my browser? It seems that the combination of fonts available is the easiest way to fingerprint a browser.

closed as off-topic by Eric G, Gilles, TildalWave, Xander, Steve Mar 23 '14 at 3:42

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – Eric G, Gilles, TildalWave, Xander, Steve
If this question can be reworded to fit the rules in the help center, please edit the question.


Use the open source Flash/SWF player - LightSpark.

If LightSpark currently provides only a Mozilla browser plugin, encourage the developers to port to Chrome, or port it yourself.

If LightSpark doesn't currently have a toggle for disabling or anonymizing font information, upload a patch to the project, or encourage the project developers to do so.

  • This may seem a high-effort solution, but if we encourage this project - we could eventually end-up with full user empowerment over Flash execution in browsers. A security plus in my book. – LateralFractal Oct 3 '13 at 4:40
  • Thanks, but that's a solution for the future, besides, Flash will probably be completely dead before we end up "with full user empowerment over Flash execution in browsers". – Gaia Oct 3 '13 at 16:12

Not the answer you're looking for? Browse other questions tagged or ask your own question.