[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Public WebGL] about the VENDOR, RENDERER, and VERSION strings




----- Original Message -----
> On Tue, Nov 30, 2010 at 11:52, Mark Callow <callow_mark@hicorp.co.jp>
> wrote:
> > I care very strongly about privacy and anonymity but I can't see how
> > revealing the type of OpenGL implementation in one's computer
> > affects that
> > in any way. If the info. included a serial number, I'd certainly be
> > worried.
> > As it is, what is the potential problem you see?
> > Please explain more.
> 
> You can have a look at https://panopticlick.eff.org/ for instance to
> see how information exposed by your browser makes you traceable.
> 
> Every new "user-agent"-like feature will give more and more bits of
> uniqueness, at a certain point the aggregation of all this information
> would effectively allow to create a permanent serial number tied to an
> user or handful of users.

Yes that's exactly what I had in mind, and I wasn't aware of this EFF link so thanks for it. I'll send them a WebGL patch (to be fair, in addition to the strings we discuss here, various other getParameter pnames also give information on the graphics card).

Benoit

> 
> Regards,
-----------------------------------------------------------
You are currently subscribed to public_webgl@khronos.org.
To unsubscribe, send an email to majordomo@khronos.org with
the following command in the body of your email: