Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/gautamkrishnar/nothing-private

Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml
https://github.com/gautamkrishnar/nothing-private

browser-fingerprinting browsers fingerprinting google-analytics hacktoberfest icognito-mode privacy private-browsing proof-of-concept security website

Last synced: about 1 month ago
JSON representation

Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml

Host: GitHub
URL: https://github.com/gautamkrishnar/nothing-private
Owner: gautamkrishnar
License: gpl-3.0
Created: 2016-12-16T20:47:41.000Z (over 7 years ago)
Default Branch: master
Last Pushed: 2023-09-02T10:34:56.000Z (about 1 year ago)
Last Synced: 2024-04-27T18:31:18.163Z (4 months ago)
Topics: browser-fingerprinting, browsers, fingerprinting, google-analytics, hacktoberfest, icognito-mode, privacy, private-browsing, proof-of-concept, security, website
Language: JavaScript
Homepage: https://nothingprivate.gkr.pw
Size: 2.57 MB
Stars: 2,120
Watchers: 44
Forks: 155
Open Issues: 3
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md

Awesome Lists containing this project

README

        # Nothing Private

[![Build Status](https://travis-ci.org/gautamkrishnar/nothing-private.svg?branch=master)](https://travis-ci.org/gautamkrishnar/nothing-private) [![All Contributors](https://img.shields.io/badge/all_contributors-43-orange.svg)](#contributors) [![ProductHunt](https://img.shields.io/badge/View_on-Product_Hunt-orange.svg)](https://www.producthunt.com/posts/nothing-private) [![Gitpod Ready-to-Code](https://img.shields.io/badge/Gitpod-Ready--to--Code-orange?logo=gitpod)](https://gitpod.io/#https://github.com/gautamkrishnar/nothing-private) [![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/3182/badge)](https://bestpractices.coreinfrastructure.org/projects/3182)

This project is a proof of concept that any website can identify and track you, even if you are using **private browsing** or **incognito mode** in your web browser. Many people think that they can hide their identity if they are using private browsing or incognito mode. This project will prove that they are wrong.

![Meme](https://i.imgur.com/Zdhatbj.jpg)

## How to use the website

* Visit  and enter your name

* Click the **"See the magic"** button

* Visit the same website in Private browsing / Incognito mode

* See the magic :star:

### Don't scroll down and ruin the fun... Just follow the steps above... :smile:









## Hey! How?

Hope you are surprised! :smile: Yes, the website can remember your name even if you had visited it via **private browsing** or **incognito mode**. Yes, nothing is private in this world anymore! This is what the big companies are doing with your identity. You think that going into private mode will wipe out all the traces? **Absolutely not!** In reality, using private browsing or incognito mode will just help you to clear your browsing history. Your internet service provider, search engines, and your favorite websites **can still track you**. They know your likes and dislikes. They use your data to earn money. The video below explains everything:

[![Not free](https://img.youtube.com/vi/5pFX2P7JLwA/0.jpg)](https://www.youtube.com/watch?v=5pFX2P7JLwA)

Yes, nothing is free...

## How to stay safe?

One way to reduce the likelyhood of browser fingerprinting by using some of the browsers listed in [the list of browsers implementing countermeasures](browsers-with-countermeasures/README.md) curated by the community.

Browser fingerprinting is just an example of several ways that can be used to track your identity. For some others visit Freecodecamp [blog](https://www.freecodecamp.org/news/what-you-should-know-about-web-tracking-and-how-it-affects-your-online-privacy-42935355525/). Here's a picture from the blog that explains the current situation:

![https://user-images.githubusercontent.com/8397274/59973123-728ee800-95b8-11e9-90b3-78c6e4003120.jpeg](https://user-images.githubusercontent.com/8397274/59973123-728ee800-95b8-11e9-90b3-78c6e4003120.jpeg)

### References

* 

* 

* 

* 

* 

* 

* 

* 

* 

### News articles

* [Google faces $5 billion lawsuit in U.S. for tracking 'private' internet use](https://www.reuters.com/article/us-alphabet-google-privacy-lawsuit/google-faces-5-billion-lawsuit-in-u-s-for-tracking-private-internet-use-idUSKBN23933H): You may already know about Google analytics if you are a web developer. In order to develop such a sophisticated tool, they need a lots of workforce. 

Why are they giving it away for free?. You are paying them with your and your user's data. You can easily switch to some open source alternatives like [Matomo](https://matomo.org/), but none of the self hosted alternatives provide availability and features as the google analytics. BuiltWith says that **69.5** percent of Quantcast’s Top **10,000** sites (based on traffic) are using Google Analytics and 

**54.6** percent of the top million websites that it tracks.

* [Google fails to quash Incognito mode user tracking, privacy lawsuit](https://www.zdnet.com/index.php/category/2381/index.php/article/google-fails-to-quash-incognito-mode-user-tracking-privacy-violation-lawsuit/): Google has failed to have a proposed class-action lawsuit quashed that alleges the company violated user privacy by collecting data in Incognito browser modes. 

### Some tech stuff

Nothing Private uses the browser fingerprinting feature of [Client.js](https://github.com/jackspirou/clientjs) to obtain the fingerprint of your web browser. When you submit the form, this fingerprint is saved, along with your name in a MySQL database using PHP as a backend. The next time you visit the website your browser fingerprint is matched with the column in the database and your name is returned.

The current data points used for generating fingerprints are:

```text

user agent, screen print, color depth, current resolution, available resolution, device XDPI, device YDPI, plugin list,

font list, local storage, session storage, timezone, language, system language, cookies, canvas print

```

Visit [db_server](https://github.com/gautamkrishnar/nothing-private/tree/master/db_server) for the server files. (See [historical SQLite version](https://github.com/gautamkrishnar/nothing-private/tree/2abc011c39e500279169f70118048d6592860cce/db_server_sqllite) of the backend code).

#### Technologies used

* [Client.js Browser fingerprinting](https://github.com/jackspirou/clientjs)

* [PHP](https://secure.php.net/)

* [MySQL Database](https://www.mysql.com/)

* [JSON](https://www.json.org/)

* [HTML](https://developer.mozilla.org/es/docs/Web/HTML) & [CSS](https://developer.mozilla.org/es/docs/Web/CSS)

* [Karma](https://karma-runner.github.io/) and [Jasmine](https://jasmine.github.io/) for unit testing

* [Cypress](https://www.cypress.io/) for integration testing

## Contributing

Feel free to modify the code and open any pull requests. Also, be sure to read through the [Contributing Guidelines](./CONTRIBUTING.md)

### Todo

* [ ] Fix any typos

## Running locally

You can run nothing private locally via docker using the commands below:

```bash

git clone [email protected]:gautamkrishnar/nothing-private.git

cd nothing-private

docker-compose up -d # use --build to update image if you do 'git pull'

```

Visit http://localhost/

## Hall of Fame

- Special thanks to [KwestiaB](https://twitter.com/KwestiaB), [Gordon Shieh](https://twitter.com/GordonShieh94) and several others for reporting the expiry of nothingprivate.ml domain [#128](https://github.com/gautamkrishnar/nothing-private/issues/128). You guys literally saved the whole project by preventing the missuse of the domain.

## Contributors

Special thanks to these rockstars:

  

    
_{Miles McCain}
💻 📖

    
_eV
💻 📖

    
_{Timothée Boucher}
💻 📖

    
_{Muhammad Ubaid Raza}
💻 📖

    
_{Edipo Vinicius da Silva}
📖

    
_{Daniel Davis}
💻 📖 🤔 📢

  

  

    
_{Alleras the Sphinx}
📖

    
_{Pooja Bhaumik}
💻

    
_{JOBIN PHILIP ABRAHAM}
📖

    
_{Sidhin S Thomas}
📖

    
_Noah
📖 🐛

    
_{jamesoreillyms}
📖

  

  

    
_Roger
💻

    
_{Fisayo Afolayan}
📖

    
_Riddler
💻 🐛

    
_{Nimit Bhargava}
📖

    
_{Bruno Massa}
💻 🐛

    
_{Khushal Sharma}
💻 🐛

  

  

    
_CrisMen
🐛

    
_floppypanda
🐛

    
_logenkain
🐛

    
_Tilepaper
🐛

    
_{Karthik Varma}
🐛

    
_{Tobias Nießen}
🐛

  

  

    
_Darpan
🐛

    
_Permik
🐛

    
_{sleepyeinstein}
🐛

    
_{Jan Stefański}
💻 🐛

    
_{Matthew Leisy}
💻

    
_{Zach Capshaw}
💻

  

  

    
_Matthew
💻

    
_{Ricky Singh}
💻

    
_{Armando Lüscher}
💻

    
_{Mateusz Lisowski}
💻

    
_{Holyprogrammer}
📖

    
_{jatin sharma}
📖

  

  

    
_{Ryan Agard}
📖

    
_{Maciej B}
💻

    
_quadratrund
💻

    
_ElienVissers
📖

    
_{P K}
📖

    
_{Lynn Nguyen}
📖

  

  

    
_{Shubham Kr. Singh}
💻

    
_Tuanthai4444
⚠️

    
_{chinna samudrudu}
💻

    
_HaridevVS
🐛

    
_{James George}
📖

    
_{Deepesh Nair}
📓

  

  

    
_nunbit
🐛

    
_{Jonas Große Sundrup}
📖

    
_{Bram Boeckx}
📖

    
_{Anıl Şenay}
💻

    
_{Domenico Luciani}
📖

    
_{Lachlan Heywood}
💻

  

## Thanks

* Thanks to the **300K**:star: users.

* Thanks to [IssueHunt](https://issuehunt.io/) for sponsoring this project: 




* Thanks to [DuckDuckGo](https://ddg.gg) for this [tweet](https://twitter.com/duckduckgo/status/884763902847971329).



* Thanks to [CloudFlare](https://www.cloudflare.com) for their support and [PRO Plan](https://blog.cloudflare.com/cloudflare-open-source-your-upgrade-is-on-the-house/) Sponsorship.



* **BrowserStack** for browser testing sponsorship:







* **Sentry** for error monitoring sponsorship:

 

 

 

 

* **JetBrains** for sponsoring the Open Source License to my favourite IDE WebStorm:

 

 

 

 

* [33giga.com.br](https://33giga.com.br/)  for the [blog post](https://33giga.com.br/site-prova-que-janela-anonima-nao-e-sigilosa-veja-como-navegar-sem-deixar-vestigios-na-rede/).

* Thanks to everyone who [tweeted](https://www.google.co.in/search?q=intext%3Anothingprivate.ml+site%3Atwitter.com) about this.

* Thanks to TechCycle for this [demo video](https://www.youtube.com/watch?v=R_Dbu0BSjus).

* Thanks to the @Mozilla community for discussing privacy issues. Some users even reported that nothing private is even working correctly with the latest version of Firefox Focus. They created an [issue](https://github.com/mozilla-mobile/focus-android/issues/900) for it.

* [https://softwarelivre.org/](https://softwarelivre.org/piratas/blog/site-prova-que-janela-anonima-nao-e-sigilosa).

*  Thanks **Tutanota** for sponsoring free encrypted emails for my opensource projects:

 

 

 

## Having trouble?

If you are having trouble using this project, please open a [new issue](https://github.com/gautamkrishnar/nothing-private/issues/new) and describe your problem.

## Spread the word!

Liked the project? Just give it a star :star: and spread the word!