Bug 387549

Summary:	According to panopticlick 3.0 test does not protect against trackers
Product:	[Applications] konqueror	Reporter:	Martin Steigerwald <Martin>
Component:	webenginepart	Assignee:	Konqueror Developers <konq-bugs>
Status:	RESOLVED WORKSFORME
Severity:	major	CC:	rjvbertin
Priority:	NOR
Version:	5.0.97
Target Milestone:	---
Platform:	Debian unstable
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:
Attachments:	konqueror with results of panopticlick 3.0 test

Description Martin Steigerwald 2017-12-03 10:37:36 UTC

Created attachment 109187 [details]
konqueror with results of panopticlick 3.0 test

Choosing major as priority according to the elected privacy by default goal.

Despite proxy settings pointing to Privoxy, as well as Easylist+Easylist Privacy, Easylist Germany, Fanboy List and quite some other lists enabled in the ad blocker settings according to https://panopticlick.eff.org/ neither Konqueror 17.08 nor Akregator 17.08 block trackers or protect against fingerprinting:

# How to reproduce
- Tell Konqueror to use Qt Webengine (only offered renderer in my Debian Unstable system)
- Activate Ad filter
- Activate EasyList Germany, ROList, Adblocklist.org, EasyPrivacy+EasyList, ChinaList, AdblockRules.org, Czech List, Fanboy´s List, Hackarus anti-advertisment, Hackarus Anticounter, NLBlock or…
- … even activate *all* lists expect obvious duplicates
- For good measure optionally even tell it to use Privoxy as a proxy (However I did not adapt the configuration of it, just using the default
- Call https://panopticlick.eff.org/
- Run the test

# Actual results
Test                                    	Result
Is your browser blocking tracking ads?	        ✗ no
Is your browser blocking invisible trackers?	✗ no
Does your browser unblock 3rd parties that promise to honor Do Not Track?	✗ no
Does your browser protect from fingerprinting?  ✗ no

It suggests me to install Privacy Badger. Which I can´t and I won´t, cause it is easily fingerprintable as it learns what to block.

# Expected results
Konqueror / Akregator blocks trackers at least if being told to.

Or even better: Konqueror / Akregator block trackers *by default*.

# Recommendation
I strongly suggest into looking whether uBlock Origin would be adaptable to Konqueror / Qupzilla/Falcon / Akregator. It does its job. It does its job well. It is properly maintained. And I see no point in reinventing it.

Comment 1 Martin Steigerwald 2017-12-03 10:50:44 UTC

I also strongly suggesting *unifying* Qt Webengine privacy/adblock integration. From a usability point of view I don´t see why I should do the same privacy related settings in two completely different GUIs.

See also bug #387550 Akregator: According to Panopticlick 3.0 does not protect against trackers

Comment 2 RJVB 2017-12-04 10:41:11 UTC

You'll get more choices in Konqueror5 after you install kdewebkit and/or khtml.

The former will make it possible to use the rebooted QtWebKit backend (currently at 5.212 alpha2). Which is about the only reason I ever use Konqueror: if I want to browse using a Chromium variant I'll use a stable one that's being developed by a dedicated team, not one that uses QtWebEngine.

FWIW, I don't get answers to the 1st two questions in Google Chrome, something I write off to how I configured Privoxy.

Comment 3 Justin Zobel 2022-11-10 22:32:52 UTC

Thank you for reporting this issue in KDE software. As it has been a while since this issue was reported, can we please ask you to see if you can reproduce the issue with a recent software version?

If you can reproduce the issue, please change the status to "REPORTED" when replying. Thank you!

Comment 4 Martin Steigerwald 2022-11-12 09:24:10 UTC

To my surprise it seems that there has been a considerable improvement at least regarding web tracking. Fingerprint still appears to be quite unique:

https://coveryourtracks.eff.org/

As Konqueror using WebEngine appears to block trackers at least, I leave that issue set to closed.

This is with Konqueror 21.12.3 on KF 5.98.0 and Qt 5.15.6. QT Webengine is 5.15.10.

-----------------------------------------------------------

Our tests indicate that you have strong protection against Web tracking.

IS YOUR BROWSER:

Blocking tracking ads?	Yes
Blocking invisible trackers?	Yes
Protecting you from fingerprinting?	Your browser has a nearly-unique fingerprint
Still wondering how fingerprinting works?

LEARN MORE

Note: because tracking techniques are complex, subtle, and constantly evolving, Cover Your Tracks does not measure all forms of tracking and protection.

Your Results

Within our dataset of several hundred thousand visitors tested in the past 45 days, only one in 110103.5 browsers have the same fingerprint as yours.

Currently, we estimate that your browser has a fingerprint that conveys 16.75 bits of identifying information.

The measurements we used to obtain this result are listed below. You can read more about our methodology, statistical results, and some defenses against fingerprinting here.

-----------------------------------------------------------