Heyo, the thread about screenshots exposing EXIF metadata made me wonder what other not so obvious means of fingerprinting or outright identifying someone there are.
Of course you can argue...
that people might be aware of EXIF data on screenshots if they are already aware about them in photos, although with photos more people might be aware of data about location (permission is even asked) or camera model.
Anyway, as I was taking a screenshot to contribute, I realized I had set a specific Material You theme color.
Sure, there are presets that make you blend in, but especially if you opt for a color generated from your wallpaper (Monet), you might expose yourself via a very obscure way, which you might never have considered.
These colors are everywhere, not just in toggles. They are in your status bar buttons, notifications, keyboard color accents, Settings app background, etc..
Am I wrong about this? Did I overlook anything?
Of course anyone could choose whatever color, but as I see it, it is another vector to cross-reference someone, no?
Technically, yes. And if you are trying to remain anonymous (or at least pseudonymous) you should hide everything not related to what you share with black square
Also, not only color theme. Wallpapers and even status bar/bottom bar
So crop everything away, and try to hide with black squares…
I mean, it’s not only small areas sometimes. If you post a screenshot of an app like Settings or any Material You colored app, even the background is tinted.
This raises the question: Which color to choose if unavoidable?
The fixed blue one as it is a common favorite color? LineageOS stock wallpaper Monet green as it might be common?
Or possibly the most common color: a Google blue (is this even a thing anymore?) profile loaded with ColorBlendr?
-
Also, now that I’m in this rabbit hole, you can even be fingerprinted by “Font size” and “Display size” settings (or in dev settings: “Smallest width” dpi setting or “Display cutout”/notch of your device).
Bad actors may not do it yet or don’t realize it can be done, but the possibility to analyze these is there.