On Safari 17 every time I visit the site it claims it's my first visit, despite a trust score of 57%. Not sure if I'm interpreting the results wrong or ITP is just doing its job.

Wow yea this seems really good. And scary. Too bad it doesn't seem to work with mullvad browser

I get 0% on CreepJS with default DDG browser set to "strict", with a crowd blending score of 27%.

I get 40.7% with Mull + adblocker and 66.5% with FF + adblocker

Unique among the people who use that website. So if nobody else if you're configuration ever tried that website.... You would be unique

The bits of entropy are the more important parts of the results. The lower the bits the better

Please also consider things like canvas spoofing. It will create a unique fingerprint that is different every time.

How did it identify you via tor? Were you using the browser bundle? Completely vanilla?

Did you refresh your session between tests?

Within our dataset of several hundred thousand visitors tested in the past 45 days, only one in 4330.4 browsers have the same fingerprint as yours.

Currently, we estimate that your browser has a fingerprint that conveys 12.08 bits of identifying information.

Using Mull with NoScript through Mullvad

Same here Edit: except unique in 186,012 tests

Spoof your user-agent in FF

Mullvad browser + extensions is pointless, might as well use LibreWolf or just harden Firefox yourself.

The point of the Mullvad browser is to not stand out from the crowd; by installing extensions you are definitely standing out.

The lower the number the better. That's pretty decent.

Not necessarily bad, the lower the number the harder it is to fingerprint you. In other words, your browser stands out much less and is less noticeable from the masses than the OPs browser.

Generally the more security/privacy tweaks and add-ons you apply to your browser the more secure it gets, but you tend to stand out from the masses more because of the changes, resulting in the 1 in 4,000 type stat. It becomes easier to differentiate your traffic from others.

Whether anonymity or security is more desirable depends on your threat model.

Edit: "Your browser fingerprint appears to be unique among the 186,867 tested in the past 45 days." Evidently I stand out quite a bit 😂

Almost no browser has the same fingerprint as yours, which makes it nearly unique.

There's a couple issues going on here. Number one is it's unique amongst the people who go to EFFs website cover your tracks. That's not all of the internet users. Hell that's not even most of the internet users. It's pretty niche community.

The bits of identifying information are the critical key here. 16 bits, 2 ^ 16.. 65,000 different possibilities. Each piece of information you give, makes it a little bit easier to track you. Things like language, time zone.. The more bits, the easier it is to identify you. The less bits, the more you blend into the crowd.

This is why multiple people, including myself, have talked about fingerprint.com they're professional service, who's targeting websites, who want to track users. So they're incentivized to track as best as able.

Even if you've got a great EFF score, you should always check fingerprint.com, to see if they can track you.

https://csstracking.dev/

I see. I too use similar settings on Librewolf: should try it.