SecureBlue - report of looking suspicious

Do I need to add any extensions to SecureBlue?

I’m using stock SecureBlue (fedora) with only one added extension uBlock with Mullvad VPN. The browser is Trivalent.

Proton (and others) report that I appear “suspicious” and have to keep adding myself to whitelists, reverify myself, so I know that my profile definitely looks suspicious, even though I am not doing anything except boring stuff like Reddit, news, Proton mail, etc..

I ran fingerprint.com and it supports that my profile looks suspicious.

Are there extensions I should add to Trivalent to correct this?

fingerprint reported three signals with a score of “18 suspect score”":

‘Bot detection’

‘Incognito detected’

‘VPN detection’

I don’t think adding any extensions could help. VPN and incognito mode detection are standard (incognito less so unless you’re actually in an incognito window). Bot detection is odd.

Generally it’s up to the browser maintainer if they want to fix any detection issues. You’d want to make sure you didn’t change anything from default before reporting an issue and if it’s even in the scope.

It could just be the VPN causing issue for “Proton and others”, not necessarily the fingerprint.

https://iphey.com/ could be another data point.

This is becoming quite a common topic here I notice.

Trying to be private is a double edge sword. Most of the time you’d be using niche (relative to the general public, the majority average joe baseline) software and tooling thus you’d be fingerprinted as more unique, thus looking more suspicious from sites/services pov compared to them average joes. Got to find that thin line between convenience/useable with being super secured anon private.

I would not add more extensions for this. They usually make the browser more unique, not less. For boring daily accounts like Proton, the most practical split is often: keep the hardened/VPN setup for browsing, but use a separate normal profile or trusted network path for accounts where you do not want constant fraud checks. It is annoying, but chasing every fingerprint test can turn into an endless loop.

This is conjecture, right? Most people have unique fingerprints i’d imagine. Having a unique fingerprint doesn’t mean anything. What does matter is when your fingerprint matches the fingerprint of a bot.

Slight modification with bot because there’s many other categories, otherwise I agree.