I have a fairly fresh install of openSUSE / firefox. The only significant changes I made was installing no-script.
They estimated that my browser contains 16.44 bits of identifying information with most of it being contained in my browser’s user agent. (this translates to approximately 1 in 88,000 browsers being identical to mine).
I then installed the firefox “user-agent switcher” add-on and switched my user agent to IE6. When I returned to the site, it estimated that my browser contains 11.37 bits of identifying information. (this translates to approximately 1 in 2650 browsers being identical to mine).
I think this shows the following:
The identification is heavily dependent on the browser’s user agent (which is easily changed).
It has a hard time distinguishing between default installs.
My conclusion is that it is not a very effective way of identifying a person.I also wonder how they can account for people who use different browsers depending on the situation. Thoughts?
Edit: I realized that no-script was probably killing my test results thus making me bland and un-unique. This goes to show that you shouldn’t test things right after waking up and before drinking coffee.
It would be really fun if there was a widely used browser add-on that sends random bogus user-agent info, such as “If you can read this, you are ***]”, Watcha lookin’ at, ***]", “We are watching YOU” etc., instead of “Mozilla/5.0 blah blah”