I am something of a layperson, and have two questions regarding HTML5 Canvas fingerprinting.
As I understand it, it allows the site to extract certain hardware and software information about the visiting computer, which can be used to uniquely identify that machine. So if I were to visit site A, get finger-printed, then visit site B, and get finger-printed, my activities on sites A and B could be associated. If some identifying information (i.e. IP address) leaked on site B, my activities on site A could also be associated with that information. Or if I visited site A twice, it could tell that I was the same person. etc...
However, as I understand it, by itself, it does not reveal any identifying information. So if for some reason I didn't care about being identified as the same person on multiple occasions, I could allow it, and maintain my anonymity.
My questions are;
Am I correct in my understanding?
How would this be affected by running tor in a VM?