Aftasten van het apparaat van de bezoeker
Een pagina tast de eigen machine of het thuisnetwerk van de bezoeker af om te zien wat daar draait.
- Familie
- Gegevens
- Status
- actief
- Geldt voor
- web
Wat er gebeurt
While the page is open, requests go to the loopback address or to addresses on the visitor's own network, on a fixed set of ports and paths. What answers, how fast it answers, and whether it answers at all tells the sender which software is installed or which devices are present. The result is a characteristic of the machine that no interface exposes and the visitor never offered.
Waarom het ertoe doet
This is not the page describing itself, it is the page describing the visitor's equipment. The properties found are stable, they say something about the person, and the visitor has no way to see it happen: nothing appears on screen, and blocking it requires knowing it is there.
Veelvoorkomende oorzaken
- a fraud or device-recognition component checking for locally installed software
- a payment or checkout integration probing for a local helper application
- a component that enumerates the local network to recognise a returning environment
Dit is het níet
Reading properties the browser exposes about itself, such as fonts or a canvas rendering, is Device fingerprinting. What distinguishes this entry is that the traffic leaves the page and addresses the visitor's own machine or network, which the browser does not present as a property at all.
Hoe je het vaststelt
Indicator
Requests from the page to a loopback address or to addresses in the visitor's own network range, on a fixed set of ports or paths, present in the capture. Where they occur in every consent mode, that is part of the same observation.
Methode
network-observed
Kwaliteit van de detectie
92 van 100
De grenzen van deze bevinding
Wat dit patroon zou weerleggen
- The probe is part of a function the visitor started, such as a local card reader or signing application they chose to use.met de hand te toetsende bevinding vervalt
- The traffic is generated by an extension or by software the visitor installed, not by the page.machinaal te toetsende bevinding vervaltAttribute through the initiator chain, and repeat in a clean profile with no extensions.
- The probe only runs after an explicit action by the visitor.machinaal te toetsende bevinding wordt zwakker
- Every probe fails and nothing about the result is transmitted onward.met de hand te toetsende bevinding wordt zwakkerUnder the terminal-equipment provision the reading itself is the act, so this weakens rather than removes the finding.
Wat dit patroon níet vaststelt
- harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
- severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
- unlawfulness; that is for a supervisory authority or a court
- intent; a fault is usually a build decision, not a plan
- absence: not finding it in one capture is not evidence that it is not there
Reproduceren
- manual
METHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above
Juridisch kader
Bepalingen
Veelgehoorde tegenwerpingen
It is for fraud prevention.
That is a purpose, and it has to be stated, limited and justified against a scan of the visitor's own machine. It is not a reason the visitor cannot be told.
We only check whether a helper application is running.
Then say so, at the moment it happens, and stop when the visitor refuses. Whether the check is narrow is measurable from the port set in the capture.
No personal data is collected.
The provision on terminal equipment attaches to reading from the device, whether or not the result is personal data. And what software someone runs is a characteristic of that person.
Geldt wanneer
to-processing
Aangetroffen in
De onderzoeken waarin dit patroon gemeten is.