RAranger_danger·Apr 23, 2026
https://fingerprint.com/blog/disabling-javascript-wont-stop-...
https://github.com/jonasstrehle/supercookie
In We found a stable Firefox identifier linking all your private Tor identitiesjonasstrehle
supercookie
HTML2021–2026
jonasstrehle / supercookie · Archived
supercookie
⚠️ Browser fingerprinting via favicon!
6Distinct people
8Mentions
0Explicit recommenders
7.4KGitHub stars
What to know before exploring
What it is
⚠️ Browser fingerprinting via favicon!
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year8 dated mentions
Observed mentions: 2021-02-07 00:05:37 UTC to 2026-04-23 01:50:04 UTC.
* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 3 | 1 | 2 |
| 2026 (partial) | 2026-01-01 00:00:00 UTC | 2027-01-01 00:00:00 UTC | 3 | 0 | 3 |
What Hacker News says
8 sourcesYou can also fingerprint browsers profile-wide across sessions without any JS, CSS or even HTML, using the favicon: https://github.com/jonasstrehle/supercookie
In We found a stable Firefox identifier linking all your private Tor identitiesIn addition to server-side bits like IP address, request headers and TLS/TCP fingerprints, there are some client-side things you can do such as with media queries, either via CSS styles or elements that support them directly like <picture>. You can get things like the installed fonts, screen size/type or platform/browser-specific identifiers.
https://fingerprint.com/blog/disabling-javascript-wont-stop-...
There is also a method of fingerprinting using the favicon: https://github.com/jonasstrehle/supercookie
In We found a stable Firefox identifier linking all your private Tor identitiesseeing projects like https://github.com/jonasstrehle/supercookie kind of fill me with a dread about just how many holes would need to be plugged in the web for "privacy" to be assured, and how that would degrade my experience as an end user
In The privacy nightmare of browser fingerprintingFYI for anyone that cares: this attack vector has been patched by browsers years ago, fairly soon after this was released.
https://github.com/jonasstrehle/supercookie/issues/30
In Supercookie: Browser Fingerprinting via Favicon (2021)Supercookie: Browser Fingerprinting via Favicon (2021)
357 points · Open discussionSupercookie: Browser Fingerprinting via Favicon
402 points · Open discussion