I know window size shouldn't be changed for anonymity reasons, but what if the page has already loaded?
Does it still affect anonymity?
Add a comment
|
edited due to @DJCrashDummies comment
http://ip-check.info/ has proven this to be insecure. That is, window size change can be determined even after the page has loaded completely. As a proof of concept, try the code from https://stackoverflow.com/a/26879317/1587329, and resize your browser width after the page has loaded (with JavaScript disabled). You will see that it is dynamically adjusted.
This could unfortunately yield the browser width (and height) for an enterprising attacker.
-
1WARNING: also with javascript disabled your inner window size (and a modification of it) can be tracked also after the page has loaded. -- simply use tails (enable noscript) and checked it with the test on ip-check.info. Nov 11 '16 at 22:23
-
@DJCrashdummy: If JavaScript is disabled (on ip-check.info, you see if JavaScript is disabled right above the screen size test) They might use something akin to stackoverflow.com/a/26879317/1587329: you could then use CSS to request resources based on screen size. Ouch.– serv-incNov 18 '16 at 17:38