So there are lots of ways to figure out who people are, and I am sure I dont know all of them, but I bet I know some you dont.
Lets put together a list of known ones. Ill start.
(If we dont get a big list, which we may not, for bonus points add techniques to ease drop/intercept information)
fingerprinting techniques
- browser (duh)
- encrypted network traffic analysis, see mullvad link here https://mullvad.net/en/vpn/daita
- stylometry, https://en.wikipedia.org/wiki/Stylometry
https://github.com/abrahamjuliot/creepjs
This illustrates lots of techniques and how to implement them.
The most interesting to me is "lie" detection. If your browser attempts to give some false data, like when using the chameleon plugin, there are ways to verify a lot of it with javascript.
But check out the readme for detailed info and try it yourself on the webpage to see what it can gather from your setup. https://abrahamjuliot.github.io/creepjs/