你安装的 Chrome 扩展的组合可以跟踪你
Chrome 跟踪

> 
> 这会成为放弃基于 Chromium 的浏览器并开始使用 Firefox 的一个理由吗？也许吧，决定权在你。
> 
> 
> 


![Chrome 扩展追踪器](/data/attachment/album/202206/28/131231lrqf5p3pt7vtpz33.jpg)


即使你有了所有的隐私扩展和各种保护功能，别人仍然有方法可以识别你或跟踪你。


请注意，并非所有浏览器都是如此，本文中，我们主要关注基于 Chromium 的浏览器，并将谷歌 Chrome 作为“主要嫌疑人”。


以前，在 Chromium 浏览器上，尽管别人已经能够检测到你已安装的扩展程序，但许多扩展程序都实施了某些保护措施来防止这种检测。


然而，一位名为 “**z0ccc**” 的安全研究人员发现了一种检测已安装 Chrome 浏览器扩展程序的新方法，该方法可进一步用于**通过“浏览器指纹识别”来跟踪你**。


如果你还不知道的话：<ruby> 浏览器指纹识别 <rt>  Browser Fingerprinting </rt></ruby>是指收集有关你的设备/浏览器的各种信息，以创建唯一的指纹 ID（哈希），从而在互联网上识别你的一种跟踪方法。“各种信息”包括：浏览器名称、版本、操作系统、已安装的扩展程序、屏幕分辨率和类似的技术数据。


这听起来像是一种无害的数据收集技术，但可以使用这种跟踪方法在线跟踪你。


### 检测谷歌 Chrome 扩展


研究人员发布了一个开源项目 “**Extension Fingerprints**”，你可以使用它来测试你安装的 Chrome 扩展是否能被检测到。


新技术涉及一种“时间差”方法，该工具比较了扩展程序获取资源的时间。与浏览器上未安装的其他扩展相比，受保护的扩展需要更多时间来获取资源。因此，这有助于从 1000 多个扩展列表中识别出一些扩展。


关键是：即使有了各种新的进步和技术来防止跟踪，Chrome 网上应用店的扩展也可以被检测到。


![](/data/attachment/album/202206/28/131232jir7gu373jzc8rrz.jpg)


并且，在检测到已安装的扩展程序后，别人可以就使用浏览器指纹识别，对你进行在线跟踪。


令人惊讶的是，即使你安装有 uBlocker、AdBlocker、或 Privacy Badger（一些流行的以隐私为重点的扩展程序）之类的扩展程序，使用了这种方法，它们也都可以被检测到。


你可以在它的 [GitHub 页面](https://github.com/z0ccc/extension-fingerprints) 上查看所有技术细节。如果你想自己测试它，请前往它的 [扩展指纹识别网站](https://z0ccc.github.io/extension-fingerprints/) 自行检查。


### 拯救 Firefox？


嗯，似乎是的，毕竟我出于各种原因，[不断回到 Firefox](https://news.itsfoss.com/why-mozilla-firefox/)。


这个新发现的（跟踪）方法应该适用于所有基于 Chromium 的浏览器。我在 Brave 和谷歌 Chrome 上都测试了这个方法。研究人员还提到，该工具不能在使用微软应用商店中的扩展的微软 Edge 上工作。但是，相同的跟踪方法仍然有效。


正如研究人员指出，Mozilla Firefox 可以避免这种情况，因为每个浏览器实例的扩展 ID 都是唯一的。




---


via: <https://news.itsfoss.com/chrome-extension-tracking/>


作者：[Ankush Das](https://news.itsfoss.com/author/ankush/) 选题：[lkxed](https://github.com/lkxed) 译者：[lkxed](https://github.com/lkxed) 校对：[wxy](https://github.com/wxy)


本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出


OK
![](/assets/images/pikapods-banner-v3.webp)


![](/assets/images/pikapods-banner-v3.webp)

Even with all the privacy extensions and fancy protection features, there are still ways to identify you or track you.

Note that it is not the case for all browsers, here, we focus on Chromium-based browsers and Google Chrome as the prime suspect.

While detecting installed extensions in a Chromium browser was already possible, numerous extensions implemented certain protections to prevent it.

However, a security researcher, also known as “**z0ccc**”, discovered a new method to detect installed Chrome browser extensions, which can be further used to track you through browser fingerprinting.

**In case you did not know**: Browser fingerprinting refers to the tracking method where various information about your device/browser gets collected to create a unique fingerprint ID (hash) to identify you across the internet. Information like browser name, version, operating system, extensions installed, screen resolution, and similar technical data.

It sounds like a harmless data collection technique, but you can be tracked online with this tracking method.

## Detecting Google Chrome Extensions

The researcher shared an open-source project “**Extension Fingerprints**” which you can use to test if Chrome extensions installed on your browser are being detected.

The new technique involves a time-difference method where the tool compares the time to fetch resources for the extensions. A protected extension takes more time to fetch compared to other extensions not installed on your browser. So, that helps identify some extensions from the list of over 1000 extensions.

The point is—even with all the advancements and techniques to prevent tracking, extensions from the Google Web Store can be detected.

![](https://news.itsfoss.com/content/images/wordpress/2022/06/extension-fingerprints.jpg)

And, with the installed extensions detected, you can be tracked online using browser fingerprinting.

Surprisingly, even if you have extensions like **uBlocker, AdBlocker, **or** Privacy Badger** (some popular privacy-focused extensions), they all get detected using this method.

You can explore all the technical details on its [GitHub page](https://github.com/z0ccc/extension-fingerprints?ref=news.itsfoss.com). And, if you want to test it yourself, head to its [Extension Fingerprints site](https://z0ccc.github.io/extension-fingerprints/?ref=news.itsfoss.com) to check for yourself.

## Firefox To The Rescue?

It seems like it, considering [I keep coming back to Firefox](https://news.itsfoss.com/why-mozilla-firefox/) for various reasons.

The discovered method should work with all the Chromium-based browsers. I tested it with Brave and Google Chrome. The researcher also mentions that the tool does not work with Microsoft Edge using extensions from Microsoft’s store. But, it is possible with the same method of tracking.

Mozilla Firefox is safe from this because the extension IDs for every browser instance are unique, as the researcher suggested.

## More from It's FOSS...

- Support us by opting for
[It's FOSS Plus](https://itsfoss.com/#/portal/signup)membership. - Join our
[community forum](https://itsfoss.community/). - 📩 Stay updated with the latest on Linux and Open Source. Get our
[weekly Newsletter](https://itsfoss.com/newsletter/).