Device fingerprinting collects dozens of subtle, immutable hardware and browser characteristics—including WebGL shader rendering, AudioContext frequency decay, Canvas 2D image hashing, and TLS handshake signatures (JA4)——以生成一个唯一的64位设备ID,即使Cookie、IP地址和用户代理发生变化,该ID也能保持不变。
浏览器与硬件熵的科学原理
Every computer and smartphone has a unique physical footprint created by minute differences in semiconductor manufacturing, graphics processing units (GPUs), operating system font rendering engines, and audio processing pipelines. In information theory, this uniqueness is measured in bits of entropy. When enough entropy is collected, the probability of two different machines sharing the exact same signature drops to less than 1 in 10 million.
对于提供自助试用的SaaS平台,客户端指纹识别充当一种无形的加密印章。以下是所使用的主要熵向量:
- Canvas 2D Fingerprinting: Drawing geometric shapes and complex font glyphs onto an off-screen HTML5 `
- WebGL & GPU Shaders: Querying the `WEBGL_debug_renderer_info` extension exposes the unmasked GPU vendor and model. Rendering a 3D shader captures micro-variations in floating-point math execution.
- AudioContext Dynamics: Synthesizing an audio wave through a dynamics compressor and analyzer node captures unique frequency decay curves determined by soundcard hardware.
- TLS JA4 Fingerprints: Examining the exact sequence of cipher suites, extensions, and elliptic curves transmitted during the initial SSL/TLS client hello handshake.
| 熵向量 | 熵产出(比特) | 执行延迟 | 跨更新稳定性 |
|---|---|---|---|
| Canvas 2D渲染 | 12 - 16 比特 | 2 - 4 毫秒 | 非常高(驱动稳定) |
| WebGL着色器与渲染器 | 14 - 18 比特 | 3 - 5 毫秒 | 非常高(硬件绑定) |
| AudioContext处理 | 8 - 12 比特 | 1 - 3 毫秒 | 高(操作系统声音架构) |
| TLS客户端Hello(JA4) | 10 - 14 比特 | 0 毫秒(边缘网络) | 高(浏览器版本绑定) |
构建高速设备指纹采集器
- Execute Asynchronously on Form Focus: Trigger the entropy collection script the moment the visitor touches the email input field to finish processing before submission.
- Normalize Screen and Window Dimensions: Account for browser window resizing and multi-monitor setups to avoid fragmenting the device profile.
- Hash Entropy into a Cryptographic Digest: Combine all collected signals into an SHA-256 hash or MurmurHash3 at the Cloudflare edge.
- Query the Global Device Graph: Check if this device hash has previously activated a trial on your domain within the last 90 days.
常见问题
收集硬件熵会减慢页面加载速度吗?
不会。Seatext试用保护小于6KB,异步加载,不阻塞DOM渲染,并在8毫秒内完成所有加密哈希计算。
如果测试两台完全相同的MacBook Pro会怎样?
即使在相同的硬件型号上,已安装的系统字体、色彩配置文件校准、外围设备和操作系统补丁级别的细微差异也会产生不同的复合指纹。
浏览器更新(如Chrome 130到131)会破坏指纹吗?
Seatext使用模糊哈希算法,将不可变的硬件特征与可变的浏览器版本字符串分开分组,从而在浏览器更新期间保持身份连续性。
