logo
Kurashizu Blogwhere ideas flow
  • Home
  • News
  • Blog
  • About
  • Home
  • News
  • Blog
  • About

© 2026 Kurashizu. All rights reserved.

Admin·New Post·Service Status
Powered by Cloudflare·01.11.26
← Back to news

Show HN: GlassBox – what the browser reveals, and how identifiable you are

Original article
glassbox.codecanary.org|31 points|10 comments|by tke248|Aug 24, 2026

GlassBox: Unmasking Browser Fingerprinting & User Identifiability

GlassBox is a client-side browser fingerprinting benchmark designed to reveal the exact data points websites use to track you. Instead of these signals remaining hidden surfaced, GlassBox runs every possible measurement live and displays the results directly to the user.

🔍 How Tracking Works: The Hierarchy of Identification

Tracking scripts and anti-fraud systems don't just look at one thing; they use a layered approach to determine who you are. GlassBox categorizes these into four distinct tiers:

TierFocusScopePersistence
1Hardware EnvironmentCross-EngineLinks you across different browsers
2Engine ×\times× HardwareEngine FamilyLinks you within the same engine (e.g., Chromium)
3Browser BuildVersioningIdentifies the software, not the person
4Session DataTemporaryResets frequently (IP, Theme, Timing)

The Identification Logic

The probability of being uniquely identified can be expressed as a function of the entropy provided by these tiers: Identifiability≈∑(Hardware+Engine+Build+Session)\text{Identifiability} \approx \sum (\text{Hardware} + \text{Engine} + \text{Build} + \text{Session})Identifiability≈∑(Hardware+Engine+Build+Session)

🛠️ Features & Functionality

GlassBox doesn't just measure; it allows you to analyze and mitigate your digital footprint.

  • Identifiability Scoring: The tool calculates whether you appear as the same machine, the same engine family, or merely the same browser version.
  • Comparative Analysis: You can determine if you are "re-linkable" by importing data.
    • Action: Copy a JSON report from one session →\rightarrow→ Paste it into another.
  • Educational Resources: Includes a comprehensive how-to guide on reducing your fingerprint.

Available Toolset:

  • Run live probes
  • Enable behavioral capture
  • Toggle Geolocation (Geo: on)
  • Detect login panels
  • Export/Import JSON reports

🔒 Privacy & Data Handling

The vast majority of the audio-fp probes and hardware checks are executed entirely within your browser. There are no beacons and no analytics sent to a remote server.

The Single Exception: To provide IP intelligence, GlassBox must communicate with external public APIs:

  1. ipwho.is
  2. ipapi.is

These are used specifically to resolve your IP address, identify your network provider, and detect if you are using a VPN.

💻 Technical Output Example

When you export your data, GlassBox generates a structured report similar to this:

{
  "fingerprint": {
    "hardware": "Generic-X86_64",
    "engine": "Blink",
    "canvas": "a1b2c3d4e5f6",
    "audio": "f9e8d7c6b5a4",
    "session": {
      "theme": "dark",
      "ip_resolved": "1.2.3.4"
    }
  },
  "identifiability_score": "High"
}

Browser Fingerprint Concept

For more details, users can Expand notes, Re-run probes, or utilize the Copy JSON report feature to audit their privacy across different environments.