DPE-2026-0021

Aftasten van het apparaat van de bezoeker

Een pagina tast de eigen machine of het thuisnetwerk van de bezoeker af om te zien wat daar draait.

Familie
Gegevens
Status
actief
Geldt voor
web

Wat er gebeurt

While the page is open, requests go to the loopback address or to addresses on the visitor's own network, on a fixed set of ports and paths. What answers, how fast it answers, and whether it answers at all tells the sender which software is installed or which devices are present. The result is a characteristic of the machine that no interface exposes and the visitor never offered.

Waarom het ertoe doet

This is not the page describing itself, it is the page describing the visitor's equipment. The properties found are stable, they say something about the person, and the visitor has no way to see it happen: nothing appears on screen, and blocking it requires knowing it is there.

Veelvoorkomende oorzaken

  • a fraud or device-recognition component checking for locally installed software
  • a payment or checkout integration probing for a local helper application
  • a component that enumerates the local network to recognise a returning environment

Dit is het níet

Reading properties the browser exposes about itself, such as fonts or a canvas rendering, is Device fingerprinting. What distinguishes this entry is that the traffic leaves the page and addresses the visitor's own machine or network, which the browser does not present as a property at all.

Hoe je het vaststelt

Indicator

Requests from the page to a loopback address or to addresses in the visitor's own network range, on a fixed set of ports or paths, present in the capture. Where they occur in every consent mode, that is part of the same observation.

Methode

network-observed

Kwaliteit van de detectie

92 van 100

De grenzen van deze bevinding

Wat dit patroon zou weerleggen

  • The probe is part of a function the visitor started, such as a local card reader or signing application they chose to use.met de hand te toetsende bevinding vervalt
  • The traffic is generated by an extension or by software the visitor installed, not by the page.machinaal te toetsende bevinding vervaltAttribute through the initiator chain, and repeat in a clean profile with no extensions.
  • The probe only runs after an explicit action by the visitor.machinaal te toetsende bevinding wordt zwakker
  • Every probe fails and nothing about the result is transmitted onward.met de hand te toetsende bevinding wordt zwakkerUnder the terminal-equipment provision the reading itself is the act, so this weakens rather than removes the finding.

Wat dit patroon níet vaststelt

  • harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
  • severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
  • unlawfulness; that is for a supervisory authority or a court
  • intent; a fault is usually a build decision, not a plan
  • absence: not finding it in one capture is not evidence that it is not there

Reproduceren

  • manualMETHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above

Juridisch kader

Bepalingen

nl-tw-11-7aeu-gdpr-6-1-aeu-gdpr-5-1-c

Veelgehoorde tegenwerpingen

It is for fraud prevention.

That is a purpose, and it has to be stated, limited and justified against a scan of the visitor's own machine. It is not a reason the visitor cannot be told.

We only check whether a helper application is running.

Then say so, at the moment it happens, and stop when the visitor refuses. Whether the check is narrow is measurable from the port set in the capture.

No personal data is collected.

The provision on terminal equipment attaches to reading from the device, whether or not the result is personal data. And what software someone runs is a characteristic of that person.

Geldt wanneer

to-processing

Aangetroffen in

De onderzoeken waarin dit patroon gemeten is.

Verwante patronen

← alle patronen