Abstract. We investigate the degree to which modern web browsers are subject to "device fingerprinting" via the version and configuration information that they will transmit to websites upon request. We implemented one possible fingerprinting algorithm, and collected these fingerprints from a large sample of browsers that visited our test side, panopticlick.eff.org. We observe that the distribution of our fingerprint contains at least 18.1 bits of entropy, meaning that if we pick a browser at random, at best we expect that only one in 286,777 other browsers will share its fingerprint. Among browsers that support Flash or Java, the situation is worse, with the average browser carrying at least 18.8 bits of identifying information. 94.2% of browsers with Flash or Java were unique in our sample. By observing returning visitors, we estimate how rapidly browser fingerprints might change over time. In our sample, fingerprints changed quite rapidly, but even a simple heuristic was usually able to guess when a fingerprint was an "upgraded" version of a previously observed browser's fingerprint, with 99.1% of guesses correct and a false positive rate of only 0.86%. We discuss what privacy threat browser fingerprinting poses in practice, and what countermeasures may be appropriate to prevent it. There is a tradeoff between protection against fingerprintability and certain kinds of debuggability, which in current browsers is weighted heavily against privacy. Paradoxically, anti-fingerprinting privacy technologies can be selfdefeating if they are not used by a sufficient number of people; we show that some privacy measures currently fall victim to this paradox, but others do not.

No abstract

Cities across the globe recognise their role in climate mitigation and are acting to reduce carbon emissions. Knowing whether cities set ambitious climate and energy targets is critical for determining their contribution towards the global 1.5°C target, partly because it helps to identify areas where further action is necessary. This paper presents a comparative analysis of the mitigation targets of 327 European cities, as declared in their local climate plans. The sample encompasses over 25% of the EU population and includes cities of all sizes across all Member States, plus the UK. The study analyses whether the type of plan, city size, membership of climate networks, and its regional location are associated with different levels of mitigation ambition. Results reveal that 78% of the cities have a GHG emissions reduction target. However, with an average target of 47%, European cities are not on track to reach the Paris Agreement: they need to roughly double their ambitions and efforts. Some cities are ambitious, e.g. 25% of our sample (81) aim to reach carbon neutrality, with the earliest target date being 2020. 90% of these cities are members of the Climate Alliance and 75% of the Covenant of Mayors. City size is the strongest predictor for carbon neutrality, whilst climate network(s) membership, combining adaptation and mitigation into a single strategy, and local motivation also play a role. The methods, data, results and analysis of this study can serve as a reference and baseline for tracking climate mitigation ambitions across European and global cities. Highlights• 78% of cities have a mitigation plan with targets (avg. 47% GHG reduction)• Only 25% of cities strive for carbon neutrality, most by 2050, avg. by 2045 • 90% of cities striving for carbon neutrality are members of a climate network • Ambition is driven by city size, climate networks, M-A combination, local motivation • European cities must double their ambitions to meet the aims set by the Paris Agreement

No abstract