X hits on this document

112 views

0 shares

1 downloads

0 comments

32 / 40

Client Fingerprinting via Analysis of Browser Scripting Environment

31

5.8.

Blackberry

navigator.userAgent: BlackBerry9630/5.0.0.732 Profile/MIDP-2.1 Configuration/CLDC-1.1 VendorID/105 navigator.appName: Netscape navigator.appCodeName: Mozilla navigator.appVersion: 5.0.0.732 Profile/MIDP-2.1 Configuration/CLDC-1.1 VendorID/105 navigator.appMinorVersion: undefined navigator.browserLanguage: undefined navigator.cpuClass: undefined navigator.systemLanguage: undefined navigator.language: en navigator.buildID: Today's navigator.oscpu: undefined navigator.platform: BlackBerry navigator.product: Gecko navigator.productSub: undefined navigator.userLanguage: undefined navigator.userProfile: undefined navigator.vendor: undefined navigator.vendorSub: undefined custom.scripting: Javascript/1.3 custom.property: !d.all d.childNodes d.compatMode !d.documentMode

  • d.

    getElementById !d.getElementsByClassName !n.savePreferences

  • w.

    XMLHttpRequest !w.globalStorage !w.postMessage Figure 5.8-1: BlackBerry Browser on BlackBerry 9630 (Verizon) The BlackBerry browser can easily be identified by the navigator.userAgent but

beyond the navigator.userAgent there are a number of other properties, which can be used to uniquely identify the browser. Blackberry browser will execute scripts with a version up to and including JavaScript version 1.3, and unlike some of the other browsers that were fingerprinted only JavaScript is executed and neither Microsoft VBScript or Microsoft JScript were executed.

A number of navigator properties which other browsers populated, only a few items were defined within the Blackberry scripting environment. The navigator.language property contains the device’s language listed as a 2 character lowercase language code. The navigator.language property does not return a country code within the language field, only a language code. Unlike most of the other browsers, the navigator.buildID is defined, but it returns the unique value of “Today’s”, and the navigator.platform value is also unique in that it returns the value of “BlackBerry”.

Similar to the other mobile device browsers that were fingerprinted, the Blackberry browser does not contain functionality to allow it to masquerade as another

Mark Fioravanti, mark.fioravanti.ii@gmail.com

Document info
Document views112
Page views112
Page last viewedThu Dec 08 06:35:55 UTC 2016
Pages40
Paragraphs975
Words10494

Comments