跳至主要內容

本頁面暫無您所用語言的版本,您正在閱讀英文原文。

Academy

Checking your own setup

A check tells you what your browser answers, never what a platform decides. Its worth is the contradictions it finds inside its own set of answers, and a clean result on its own promises nothing.

第 10 課,共 14 課

What a check reads

A check asks your browser questions and prints the answers. Every row belongs to your machine rather than to the page asking.

None of it is a decision. A platform decides from the same answers plus what it knows about your other accounts, and publishes neither.

  • The values

    Screen, graphics card, fonts, clock, languages, and the drawings your machine makes.

  • What goes out unasked

    The addresses the browser hands to any site by itself, with nothing asked of it.

  • The exit

    The address a site sees, which is the proxy's only while the proxy carries traffic.

  • Not your other profiles

    One page sees one browser, and the linking signal lives between two of them.

A score is its own recipe

An outside checker weighs its rows the way its author chose and prints a number. Another checker on the same browser prints a different one.

So the number describes the checker. The rows underneath describe your machine, and only those are worth reading twice.

The order to check in

Each step answers something the one before it cannot. Run all of them inside the profile you are checking.

  • Read the values

    Open the free check in the profile and start with the rows marked as telling you apart.

  • Ask about leaks

    The leak test shows which addresses the browser gives out itself, and a proxy has no say there.

  • Compare your own profiles

    Take the short code the check prints in each profile and count the repeats.

  • Then an outside checker

    The profile start page keeps links to the ones this trade uses, opened through the profile's own proxy.

Contradictions inside one set

A single odd value rarely gets an account looked at. A pair of values that cannot both be true does.

This is what a check is good at: it holds one set of answers next to itself and shows where the set argues.

What disagreesHow it readsWhat it usually means
Address and clockA German exit next to an American time zoneThe clock came from your computer, not the exit
Address and languageAn Italian exit next to an English only listThe language list was never pinned to the country
Page and background threadThe page names one machine and a worker anotherThe substitution reaches only the top document
Promise and windowA phone screen next to a desktop windowThe window never took the size the profile claims
Exit and your own addressThe exit address equals the one you have at homeThe proxy is not carrying this profile's traffic

The most telling rows

Most rows repeat what any page could show you. A few are what actually separates one browser from the next, and a good check marks those.

They are the picture and the tone your machine produces, the pixels the card returns, the fonts, the screen, the clock and the languages.

A card's name is easy to change and the pixels behind it are not, which is why the two sit in separate rows.

The self-test inside the app

The app runs an audit of its own, and it does what no outside page can: it knows what the profile promised, so it can name the value that disagrees.

A desktop profile of the current generation runs 29 checks in a throwaway copy carrying the same seed, and your open session is left alone.

  • The values

    Platform, the system it reports, screen, cores, memory, graphics renderer, clock and the languages.

  • The hiding

    A patched function that no longer reads as native code proves tampering more plainly than a mismatch.

  • Frames and threads

    A hidden frame and a background thread have to answer the same cores and system as the document.

  • The drawings

    Two reads agree, transparent pixels stay transparent, and the noise resists subtraction.

A red row without a fault

Some rows read red on a perfectly correct profile, and knowing which ones saves you from repairing what works.

  • The canonical zone name

    A Kyiv clock answers as Europe/Kiev and a Kolkata one as Asia/Calcutta, as an ordinary Chrome does.

  • The capped memory

    Chrome reports memory only up to a ceiling of its own, whatever the machine holds.

  • A phone's fonts on a computer

    The fonts a phone profile claims live on Android and almost nowhere else.

Silence instead of a verdict

A check that cannot measure says so rather than printing a reassuring line. An invented pass is worse than no answer, because you act on it.

So the start page gives no verdict on the proxy while your own address is unknown, and the self-test declines to run when it cannot prepare its throwaway copy.

What this lesson does not claim

  • It does not claim that a clean check means a safe account. A platform reads the same answers plus your history with it.
  • The check on this site cannot compare your real address with your proxy's exit. That needs a server, and a privacy tool collecting visitors' addresses would be the thing you came to avoid.
  • Nothing here measures behaviour, content or account age. Those are read by every platform and by no browser check.
  • Not every row is expected to be green. On the shipped engine one graphics read still returns bytes that go around the canvas noise, and the self-test shows that row red.
  • It does not tell you what a given platform accepts. Their thresholds are unpublished and they move.

Where you can see this yourself

Every claim here is one place in the code and one stand you can run.

The free check reads 12 values and makes no network call
apps/web/components/tools/FingerprintCheck.tsx · apps/web/test/инструмент-отпечатка.js
The self-test's 29 checks really run in a browser, not read as text
apps/desktop/src/lib/fpAudit.js · apps/desktop/test/audit-on-builtin.js
The leak test asks your browser for the addresses it gives out on its own
apps/web/components/tools/LeakCheck.tsx · apps/web/test/тест-утечки.js
The exit country decides the clock and the language, over several providers
apps/desktop/src/lib/exitGeo.js · apps/desktop/test/exit-geo.js

Questions

A checker gave me a low score. Is my profile broken?
Not by that number alone. Open the rows and look for two values that cannot both be true.
Two checkers disagree about my time zone. Which is right?
Often both. A Kyiv clock answers under its older canonical name, and an ordinary Chrome answers the same way.
Does the check on this site keep my values?
It makes no network call and writes nothing into your browser. What you see is measured in the page.
Can a check tell me whether my accounts are linked?
No. It sees one browser at one moment, and linking is about what two of your profiles have in common.
Why is the app's self-test worth more than an outside page?
Because it knows what the profile promised and can point at the value that disagrees. An outside page has nothing to compare with.

What this browser answers

The check reads 12 values here in the page and sends nothing anywhere.