Trang này chưa có bằng ngôn ngữ của bạn. Bạn đang đọc bản tiếng Anh.
Blog
What Amazon reads about you besides cookies
Đội ngũ ARMANOS7 min
What a page takes without your consent
None of these values asks permission: the browser hands them to any script on the page. A platform reads the nine groups below before you ever press sign in.
On their own they are ordinary, and each one turns up on millions of machines. The danger is not a single value, it is the way they line up together.
| What a platform asks for | What it gets back |
|---|---|
| A WebGL drawing | Pixels that differ machine by machine |
| Clock and language | Zone, language, calendar, separators |
| Fonts | Which families sit on your machine |
| Input and output devices | Whether there are cameras, microphones, speakers |
| Speech synthesis voices | The voice set for the claimed language |
| Connection | Speed, latency and the kind of link |
| Memory | The browser heap ceiling as a step |
| A WebGPU snapshot | The same drawing by another route |
| Android connection fields | type, downlinkMax, ontypechange |
Fonts separate you better than an address
A page measures the width of a line in a given font and learns from the answer whether you have it. Running through a hundred names takes a fraction of a second, and it asks you nothing.
A Windows profile always carries 14 fonts, and each of the 18 optional ones arrives on its own draw against a threshold of 55 out of 100. On macOS that is 15 and 20, on Linux 21 and 17, and two identical lists are rarer than they look.
The connection is three numbers that agree
A page reads the connection as three numbers: latency, speed and kind. A desktop profile answers with a latency of 50 to 200 milliseconds and a speed of 5 to 10 megabits, a phone profile with a latency of 100 to 300 and a speed of one and a half to eight.
The kind is not drawn by lot but derived from the latency by the browser's own thresholds: up to 272 milliseconds it is 4g, beyond that 3g, from 1420 it is 2g. The pair «4g at 300 latency» does not occur in a real browser, and the profile will not have it.
The numbers come from the profile's seed and do not change between launches. A connection that is fast in the morning and ten times slower in the evening on the same profile would be a marker in itself.
| Connection field | Desktop profile | Phone profile |
|---|---|---|
| Latency, ms | 50, 100, 150 or 200 | 100, 150, 200, 250 or 300 |
| Speed, Mbit/s | 5 to 10 | 1.5 to 8 |
| Kind | 4g | 4g, and 3g at 300 ms |
The browser rounds memory to a step
Your browser never tells a page the exact amount of memory: it places it on one of a hundred steps between 10 MB and 4 GB. The top step is 3 760 000 000, so a page never sees a flat four gigabytes.
An exact number where everyone else shows a step therefore marks you out more than any of the steps could. This is the case where rounding works for you and precision costs you.
Cores and memory follow the graphics card
A platform asks for the card name, the core count and the memory size separately, then checks them together. Old integrated graphics next to sixteen cores is a pairing laptops never carried.
So in your profile cores and memory follow the named card rather than landing on a draw of their own. Every class of card has its own set, and the harmonising runs when edits are saved: a card outside the table has nothing to harmonise against.
Speech voices speak the profile's language
A page also reads the list of voices for reading aloud, and it names the machine's language as well as the clock does. A profile's voices follow its main language: a profile in German has no Russian voices, and a Russian one has no German ones.
On the built-in engine their names still come in your computer's language: those are the program's own resources, one language for every profile. ARMANOS Browser on macOS names them in the profile's language.
The Fingerprint self-test inside the program (profile menu > Test fingerprint) counts foreign voices as a separate row, «Voices only in the profile language»: a list holding a voice outside the profile's language turns it red.
Amazon counts your actions too
A platform reads more than the browser: what you do over a day counts as well. New listings, listing edits, buyer replies and review requests are expected at an ordinary seller pace.
The E-commerce scenario of your profile holds those daily ceilings in advance, and Amazon, eBay, Etsy, Walmart, Shopify, WooCommerce and BigCommerce are named in it one by one.
| What you do in a day | Ceiling |
|---|---|
| New listings | 10 |
| Listing edits | 40 |
| Buyer replies | 30 |
| Review requests | 40 |
| Account switches | 2 |
A window wider than the screen
Your browser names the screen and the window as two ordinary numbers, and a page reads both in one line. A window wider than the claimed screen describes a machine that does not exist.
Across a pool of 900 profiles a maximised window did not fit the claimed screen for about six profiles in ten, and that figure is for a 1920 by 1080 monitor. The pool held 18 distinct screens.
How to read this yourself in one evening
Everything named above is visible from a browser window, with nothing to install. The self-test inside the app takes up to 37 readings in a real browser, but your first steps work without it.
Start with the cheapest: clock, language, screen, window. Fonts, memory and the graphics card come next, and that is where mismatches show up most often.
- 1
Open the free check
It reads 12 values right in the window and sends nothing anywhere.
- 2
Compare two of your profiles
The ones meant to stay strangers have to differ at least in screen and fonts.
- 3
Look at memory and the card
An exact memory figure next to foreign cores is a pairing that never occurs.
- 4
Count your actions over a day
A platform tracks a seller's pace itself, and a sharp jump reaches it first.
What this does not claim
- This is not the whole list of what Amazon reads. It names nine groups you can check yourself, and no platform publishes the list it works from.
- It does not claim that answers in agreement make an account safe. Behaviour, payment details and the history of complaints stay yours, and no browser changes them.
- The order of the groups says nothing about their weight. Which one counts for more is something a platform never states, and nothing outside lets you derive it.
- The font counts and daily ceilings describe the set as it stands today. Platforms move their own rules, and the set follows them.
Where you can see this yourself
Every number above comes out of code you can open and run.
- The nine groups of answers are derived from the built engine tree
- packages/shared/src/index.js · apps/desktop/test/опись-умений-снимается.js
- Every profile gets its own font list and keeps it across launches
- apps/desktop/test/fingerprint-consistency.js
- The hundred memory steps match the engine to the unit
- packages/shared/src/index.js · packages/shared/test/ступени-памяти-как-у-движка.js
- Cores and memory never contradict the graphics card that was named
- apps/desktop/test/fingerprint-consistency.js
- The daily ceilings of the E-commerce scenario sit on one line
- packages/shared/src/index.js
- The readings are taken in a real browser, not parsed out of rules
- apps/desktop/test/audit-on-builtin.js
- A profile window never opens wider than the screen it claims
- apps/desktop/test/окно-не-шире-экрана.js
Questions
- I clear cookies after every sign in, is that not enough?
- A cookie is one line out of many. The machine under the browser is the same after the wipe, and it identifies you exactly as it did yesterday.
- Does private browsing close this?
- It forgets cookies when the window closes and touches neither fonts, nor memory, nor the graphics card, nor the clock. Most of the answers stay where they were.
- Does swapping the user agent not settle it?
- That is one field out of many. Replacing a single field creates a fresh mismatch more often than it closes an old one.
- Does a proxy change any of this?
- The address arrives from elsewhere, while fonts, memory and the graphics card are produced on the machine in front of you. A proxy closes one value and leaves the rest alone.
- How many Amazon accounts will one computer carry?
- The limit comes from how alike your profiles are and from your pace over a day. Once screen, fonts and memory differ, the question turns into a different one: how unlike they are.
Next to this
Amazon accounts
Daily ceilings, the first week and the cost of switching accounts.
Font fingerprinting
How a page runs through the names and what the answer shows.
A window wider than the claimed screen
Where the 900 profiles, the 18 screens and that share come from.
Free fingerprint check
12 values read in your browser, with nothing sent anywhere.
See what your own browser answers
The check reads 12 values in the window and sends nothing anywhere.