How can I prevent web-sites from seeing which plug-ins I have installed?
Mozilla's 'Plugin Update Checker' apparently can see which plugins I have installed. Can all web-sites see what plug-ins I have? If so, how can I prevent Firefox from leaking this information?
If for instance they know I have a plug-in from a certain bank installed, they can target me if they find a vulnerability in the plug-in. So, I would really rather NOT have Firefox tell others!
所有回复 (6)
You can disable whatever plugins you want, but those plugins won't work when you need them if they are disabled.
I'm sorry if I haven't made myself clear.
I only don't want every website out there to just know/see which plugins I have installed. I don't want to disable them!
See navigator.plugins:
The navigotor.plugins CAUSES this, but can it be disabled? Especially the filename for example.
This 'feature' is largely responsible for browsers being uniquely identifiable through browser statistics, see https://panopticlick.eff.org/. I can imagine that disabling this feature altogether might result in a lot of sites not functioning correctly because they rely on the information being available, but why does the filename of the plugin matter to any website at all?
A short description/identifier of the type of plugin (eg. Flash Player) and maybe a version number, such as 11.1, should suffice for the purposes of this feature, and it would make the information a lot less unique.
Set the plugin.expose_full_path to false on the about:config page to prevent from exposing the full path in navigator.plugins.
I am not talking about the full path, the default of the expose_full_path setting is false and so it is on my setup. Still, the filename, for example, is also irrelevant. What good is it to any website to know that my Flash plugin is run from npwrapper.libflashplayer.so? Or even that it's rev 102? This information is still revealed, even though plugin.expose_full_path is set to false.