July 2021 Summaries

Browsers provide Incognito mode to protect user privacy by not permanently storing browsing history, cookies, or information, but this feature can be exploited to bypass paywalls in business contexts. The text reviews four methods to detect Incognito mode: Access Timings, Filesystem Quotas, IndexedDB API, and Local Storage. However, these methods have limitations and are not universally effective across all browsers. Access Timings works in Chrome and Edge due to their shared Chromium engine, but not in Firefox, Safari, or Opera. Filesystem Quotas were effective only in older Chrome versions, and IndexedDB API works only in Firefox. Local Storage detection was once viable in Safari but no longer functions. Fingerprint emerges as a robust alternative, claiming comprehensive Incognito detection across all major browsers by utilizing browser fingerprinting, which helps businesses prevent fraud and unauthorized content access. Fingerprint is user-friendly, quick to integrate, and adaptable, offering a more reliable solution compared to outdated methods.

Credential stuffing poses a significant threat to online security, as it exploits the common practice of password reuse across multiple accounts, leading to costly data breaches. This form of cyberattack involves the automated use of stolen usernames and passwords, often obtained from the dark web, to gain unauthorized access to user accounts across various websites. Despite a relatively low success rate of 0.1-0.2%, the sheer volume of attempts makes it a potent threat, with notable incidents affecting companies like Dunkin', Zoom, and The North Face. To combat credential stuffing, organizations are encouraged to implement multi-factor authentication, use security questions, employ CAPTCHA tests, block suspicious IP addresses, and leverage device fingerprinting. These measures, alongside more advanced techniques like blocking headless browsers and monitoring for leaked passwords, form a comprehensive defense strategy. The emphasis on robust credential stuffing prevention is crucial for protecting user data and maintaining business integrity in the face of escalating cybersecurity risks.

The rise of online shopping has introduced convenience but also increased the risk of credit card fraud, particularly Card Not Present (CNP) fraud, which is a major challenge for online businesses due to its difficulty in real-time detection. CNP fraud occurs when scammers illegally obtain credit card details and use them for online or phone purchases, posing a significant threat, as it is projected to be worth nearly $35 billion globally in 2022. Preventing CNP fraud involves several strategies, such as collecting and enriching customer information to identify unusual transaction behaviors, following best data protection practices, and implementing extra authentication measures. Businesses are encouraged to utilize risk scorecards and leverage software solutions to differentiate themselves by effectively reducing scams and protecting customer information, thereby enhancing their reputation and customer trust. Tools like Fingerprint can assist businesses in establishing robust CNP fraud prevention measures, which are becoming essential as cybersecurity awareness grows.

Single-factor authentication, primarily using a username and password, is prevalent but vulnerable to breaches, prompting a shift towards two-factor authentication (2FA) for enhanced security. 2FA involves verifying identity through a second step, such as a one-time code sent via SMS or email, a PIN, or a code from an authenticator app, though each method has its strengths and weaknesses. SMS-based 2FA, while popular due to its ease of use and wide acceptance, faces security issues like SIM swapping and interception, as well as cost concerns from services like Twilio. An alternative, using Time-based One-time Passwords (TOTP) through an authenticator app, is more secure but requires a device with the app installed. To reduce the frequency and cost of SMS verifications, integrating browser fingerprinting can help by allowing users to bypass 2FA if their browser fingerprint matches a stored one, balancing security and user convenience. The tutorial demonstrates setting up a NodeJS application with Twilio Verify for SMS 2FA and FingerprintJS for browser fingerprinting, highlighting how this combination can enhance security while minimizing costs and improving the user experience.

A novel method for browser fingerprinting using ad blocker signals has been introduced, expanding on the theoretical discussions by providing a practical implementation as of April 2021. Ad blockers, used by approximately 26% of Americans, leave identifiable traces that websites can harness to improve visitor identification by examining discrepancies in the filters used by specific ad blockers. This method generates a unique user identifier by combining these signals with other browser attributes. The article delves into the mechanics of ad blockers, explaining that they operate by hiding elements via CSS or blocking resources at the network level, with variations in implementation across different browsers like Chrome, Firefox, and Safari. The process of using ad blocker signals involves detecting blocked CSS selectors and unique filters, offering a way to create fingerprints that remain effective even in incognito modes on certain platforms. This technique is a part of the broader Fingerprint library, which aims to enhance online security by providing a robust identification method that can be particularly useful for anti-fraud applications.