Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Agree. It's almost like google made their captcha to ensure browsers continued to allow fingerprinting rather than to tell bots from humans.

As you say perhaps sites can get a kind of "entropy budget". If they ask for my screen size that's X bits of entropy. If they want to render things to a canvas and read back the result that's Y bits of entropy (Y >> X). Once sites reach a certain budget that users can set themselves, they get fake or invalid data. Worst case if I set the entropy budget too low is I get a captcha or an incorrect layout somewhere.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: