mozilla/overscripted

Can we build a heuristic for browser attribute fingerprinting?

Open

#34 opened on Mar 11, 2019

View on GitHub
 (16 comments) (0 reactions) (0 assignees)Jupyter Notebook (48 forks)auto 404
good first issueresearch question

Repository metrics

Stars
 (73 stars)
PR merge metrics
 (PR metrics pending)

Description

There are some scripts that we can pick out by name that are doing browser attribute fingerprinting:

  • The fingerprintjs scripts
  • Scripts with hs-analytics in the script_url
  • Scripts with /akam/ in the script_url

Can we build a heuristic for browser attribute fingerprinting that pulls out these scripts?

Contributor guide

Research direction
Examine the mentioned scripts (fingerprintjs, hs analytics, /akam/) and build a heuristic using regex patterns to detect browser attribute fingerprinting in script URLs.
Tech stack
pythonjavascript
Domain
securityweb dev
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
Regular ExpressionsJavaScript basics
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60