Prevent device fingerprinting (browser)

[vavavr00m]

"A device fingerprint or machine fingerprint or browser fingerprint is information collected about a remote computing device for the purpose of identification. Fingerprints can fully or partially identify individual users or devices even when cookies are turned off."

"Passive fingerprinting occurs without obvious querying of the client machine. These methods rely upon precise classification of such factors as the client's TCP/IP configuration, OS fingerprint, IEEE 802.11 (wireless) settings, and hardware clock skew."

Panopticlick https://panopticlick.eff.org/ offers a way to check how trackable, based on your "digital fingerprint", your browser is. I'm uncertain whether apps are capable of fingerprinting, not just browsers alone. If anyone expert on privacy and security can shed a light on what digital fingerprint and/or passive fingerprinting actually are/is and if it is worth re-evaluating what XPrivacy currently restricts, as stated above, I would be more than grateful.

[M66B]

https://panopticlick.eff.org/ uses this information:

• User Agent: can already be restricted, although it doesn't work correctly with Chrome Restricting the user agent for Chromium does not work #825
• HTTP_ACCEPT Headers: no web setting available
• Browser Plugin Details: Chrome does not support plugins (anymore)
• Time Zone: no web settings available
• Screen Size and Color Depth: no web settings available
• System Fonts: set...Font.. could be used
• Are Cookies Enabled? can be disabled, but most website will not work correctly anymore
• Limited supercookie test: same

http://developer.android.com/reference/android/webkit/WebSettings.html
http://developer.android.com/reference/android/webkit/CookieManager.html

So, only fonts could be manipulated, everything else is browser internal.
Font are however the same for most Android devices.

So, not much can be done unfortunately :-(

[M66B]

Another thought: your external IP will always be known anyway.

[Cerberus-tm]

Your IP is the easiest thing to hide: you can simply use a (free) VPN, like Tunnelbear, and voilà.

And you can use AFWall+ to only allow an application to access the Internet through VPN.