Re: [css-fonts] "system" generic font name

On Wed, Aug 5, 2015 at 12:09 PM, Henrik Andersson <> wrote:
> Tab Atkins Jr. skrev:
>> Installed-fonts detection in general is fairly trivial and already
>> offers a *ton* of entropy for fingerprinting. (You just have to have a
>> large list of fonts to test for, which is easy to assemble; the actual
>> tests can be done off-screen and in practically no time.) Exposing the
>> system font doesn't offer much, if any, beyond this.
> Or you could ask Flash for the actual list, no need to guess what fonts
> exists then.

Yeah, Flash and Silverlight expose them directly, but even users
without plugins turned on can be trivially fingerprinted.


Received on Wednesday, 5 August 2015 21:12:21 UTC