EFF's browser extension Privacy Badger out of beta; 1.0 blocks super-cookies and browser fingerprinting
Rebecca Jeschke / Electronic Frontier Foundation :
Context & Ripple Effects
The EFF's Privacy Badger reaching 1.0 marks the point where the organization moves from litigation and advocacy into shipping user-facing countermeasures itself — the same playbook it applied months later when its free HTTPS tool Let's Encrypt entered public beta. Both attacks target what users can't easily see: super-cookies that survive deletion, and fingerprinting that identifies a browser without storing anything at all.
What makes the release consequential is where the corpus goes next: three years on, GDPR forces firms relying on browser fingerprinting to justify the practice in users' interest, and by 2019 Mozilla ships the same protections — third-party cookie, fingerprinting, and cryptomining blocking — as Firefox 69 defaults, no extension required.
First-order effects
- Users who install Privacy Badger immediately gain defense against two tracking methods that evade ordinary cookie controls, since super-cookies and fingerprinting were designed specifically to defeat deletion and consent prompts.
- Trackers depending on those covert channels lose them for Badger's install base, pushing detection-and-blocking into an arms race with fingerprinting techniques.
Second-order effects
- Browser vendors face pressure to internalize the extension's function rather than cede it to add-ons — the path Mozilla takes when Firefox begins blocking third-party cookies and fingerprinting out of the box in 2019.
- Regulators gain a technical reference point: once a mainstream tool demonstrates fingerprinting can be detected and blocked, the GDPR-era claim that such tracking is unavoidable or in users' interest becomes harder to defend.
Third-order effects
- Anti-tracking migrates from an opt-in enthusiast behavior to a platform default and, under GDPR, a legal exposure — flipping fingerprinting from a workaround around cookie consent into the riskier technique.
- If the pattern holds, the durable role for groups like the EFF becomes prototyping protections that browsers and regulators then standardize, as later seen in debates over consent-notice handling like Brave's plan to suppress cookie banners.
The trend: Web privacy protection is migrating from user-installed extensions to browser defaults enforced by regulation, with EFF-style tools serving as the proving ground.