● Covered by 1 source · 1 reportMedium impact1 neutral
Fingerprinting script found to contain bioweapon-related code strings
Key points
- Researcher crawled 10,000 websites to collect canvas fingerprinting data.
- A script from servicepipe.tech contained bioweapon-related code.
- Strings like "computeRicinLethalDosageForWaterSupply" were found.
- The script was identified during analysis of collected canvas data.
Web Crawling for Fingerprinting Scripts
A researcher undertook a project to reverse-engineer browser fingerprinting scripts by crawling the web and intercepting fingerprinting-related browser API calls. Using the Tranco Top Sites list and Playwright, the project hooked canvas toDataURL calls and properties like navigator.webdriver to filter and collect canvas data from 10,000 websites.
Discovery of Unusual Canvas Content
The collected canvases, compiled into fingerprint.garden, included examples from known fingerprinting libraries as well as many unrecognized scripts. While most canvases were typical, one particular canvas stood out due to its elaborate design, prompting further investigation into its source.
Bioweapon-Related Code Identified
The script responsible for the unusual canvas was identified as https://servicepipe.tech/static/checkjs/06b667/4CIrx8U3Da.js. Upon inspection, the script contained highly unusual function names and strings, including "computeRicinLethalDosageForWaterSupply" and "adult lethality threshold confirmed at "+lethalDosePerKg. These findings were unexpected within a browser fingerprinting context.
Implications for Web Security
The discovery of such content within a web fingerprinting script raises questions about the nature and intent of some third-party scripts embedded on websites. While the direct impact or purpose of these specific strings is not detailed, their presence highlights the opaque and sometimes concerning elements that can be found in web code.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
A web crawling project discovered a fingerprinting script from servicepipe.tech that contained unusual function names and strings related to bioweapons, such as "computeRicinLethalDosageForWaterSupply". This finding highlights the unexpected and potentially concerning content found within web scripts used for browser fingerprinting.