{"id":1516,"date":"2022-12-08T15:58:58","date_gmt":"2022-12-08T07:58:58","guid":{"rendered":"https:\/\/vmlogin.us\/help\/?p=1516"},"modified":"2023-06-02T13:45:29","modified_gmt":"2023-06-02T05:45:29","slug":"custom-plugins-information","status":"publish","type":"post","link":"https:\/\/www.vmlogin.us\/help\/fingerprint\/custom-plugin.html","title":{"rendered":"Custom Plugins Fingerprint Information"},"content":{"rendered":"\n<p class=\"has-medium-font-size wp-block-paragraph\">Plug-ins and browser add-ons should not be confused. An add-on is a browser extension that you can usually download from a place like the Chrome store. Add-ons are run in the browser process. Examples of browser add-ons are AdBlock and Chostery.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">In contrast, plug-ins are usually pre-installed in the browser or downloaded from a third-party website. Examples of plugins are Flash and Widevine. The plug-in usually runs in a separate process, which has all the rights of the currently active user, which may lead to various vulnerabilities.<br><br><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>1.<\/strong> <strong>The risk of enabling the plugin<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">Some plug-ins such as Flash or Widevine have a documented API that allows them to obtain various uniquely identifiable data points from the host computer. Other plugins may also have such an API, whether it is public or private, it may threaten online privacy. Since plug-ins are essentially closed-source binary files, there is no reliable way to evaluate which security vulnerabilities a plug-in may have.<br><br><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>2. Generate fingerprints through the enumeration method<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">Another risk comes from the browser plug-in enumeration. Even if a website is unable or unwilling to obtain uniquely identifiable data through the plug-in API, it can still collect uniquely identifiable data as a list of plug-ins. A list of plug-ins with each version can significantly reduce the segments to which users belong. Multiple browsing sessions can be linked together individually based on this data, or combined with other data points.<br><br><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>3. Default plug-ins in Firefox and Chrome<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">By default, Firefox has no plug-ins installed. Chrome has four bundled plug-ins:<\/p>\n\n\n\n<ul class=\"has-medium-font-size wp-block-list\">\n<li>Chrome PDF<\/li>\n\n\n\n<li>Chrome PDF viewer<\/li>\n\n\n\n<li>Native client <\/li>\n\n\n\n<li>Widevine Content Decryption Module <\/li>\n<\/ul>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">For <strong><a rel=\"noreferrer noopener\" href=\"https:\/\/www.vmlogin.us\" data-type=\"URL\" data-id=\"https:\/\/www.vmlogin.us\" target=\"_blank\">VMLogin <\/a><\/strong>browser custom plugin setting details, please refer to<strong> <a rel=\"noreferrer noopener\" href=\"https:\/\/www.vmlogin.us\/help\/faq\/fingerprint-setttings.html\" data-type=\"URL\" data-id=\"https:\/\/www.vmlogin.us\/help\/faq\/fingerprint-setttings.html\" target=\"_blank\">\"Custom Plugins Tutorial\"<\/a><\/strong>.<br><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"997\" height=\"691\" src=\"https:\/\/www.vmlogin.us\/help\/wp-content\/uploads\/2023\/01\/en-19.png\" alt=\"\" class=\"wp-image-2320\" srcset=\"https:\/\/www.vmlogin.us\/help\/wp-content\/uploads\/2023\/01\/en-19.png 997w, https:\/\/www.vmlogin.us\/help\/wp-content\/uploads\/2023\/01\/en-19-300x208.png 300w, https:\/\/www.vmlogin.us\/help\/wp-content\/uploads\/2023\/01\/en-19-768x532.png 768w\" sizes=\"auto, (max-width: 997px) 100vw, 997px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><br><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"828\" height=\"256\" src=\"https:\/\/www.vmlogin.us\/help\/wp-content\/uploads\/2023\/01\/en-20-1.png\" alt=\"\" class=\"wp-image-2321\" srcset=\"https:\/\/www.vmlogin.us\/help\/wp-content\/uploads\/2023\/01\/en-20-1.png 828w, https:\/\/www.vmlogin.us\/help\/wp-content\/uploads\/2023\/01\/en-20-1-300x93.png 300w, https:\/\/www.vmlogin.us\/help\/wp-content\/uploads\/2023\/01\/en-20-1-768x237.png 768w\" sizes=\"auto, (max-width: 828px) 100vw, 828px\" \/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Plug-ins and browser add-ons should not be confused. An [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-1516","post","type-post","status-publish","format-standard","hentry","category-fingerprint"],"_links":{"self":[{"href":"https:\/\/www.vmlogin.us\/help\/wp-json\/wp\/v2\/posts\/1516","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vmlogin.us\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vmlogin.us\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vmlogin.us\/help\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vmlogin.us\/help\/wp-json\/wp\/v2\/comments?post=1516"}],"version-history":[{"count":11,"href":"https:\/\/www.vmlogin.us\/help\/wp-json\/wp\/v2\/posts\/1516\/revisions"}],"predecessor-version":[{"id":2885,"href":"https:\/\/www.vmlogin.us\/help\/wp-json\/wp\/v2\/posts\/1516\/revisions\/2885"}],"wp:attachment":[{"href":"https:\/\/www.vmlogin.us\/help\/wp-json\/wp\/v2\/media?parent=1516"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vmlogin.us\/help\/wp-json\/wp\/v2\/categories?post=1516"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vmlogin.us\/help\/wp-json\/wp\/v2\/tags?post=1516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}