How does Kiijiji know my computer?

[BiffTannen1]

Does anyone know how Kijiji.ca might be able to detect that I am the owner of ads?

I had about 20 accounts made, each using a different VPN, email address and I clear all cookies/history between sessions, before switching to a new VPN and email address.

I had 1 Active ad on each account until I got greedy and started making more accounts today. All of a sudden all 20 of my accounts had their ad's deleted.

I'm curious as to how they could have linked all of those accounts back to me, here is the following safe guards:

- I used unique VPN for each account
- Each account had unique email address
- All had completely different ad's/very unique
- All ad's were active for at least a day until I started creating new accounts on new vpn's

I don't think it was Flashcookies either because I looked in the macromedia dot com flash web app that gives you the option to delete your flash cookies and it showed none in there.

My only other possible idea on how they are making the correlation is through user-agent/browser information.

Any ideas?

 

[444444]

Disabled WebRTC?

 

[BiffTannen1]

Disabled WebRTC?

I'm VAGUELY familiar with WebRTC (i'm just remembering I saw the term appear today when I was googling stuff like "view ip address behind VPN" and i was looking for jsfiddle's to test this).

If WebRTC is enabled? Does it essentially allow to view my ip under a VPN? I'm going to check if it's enabled now.

 

[444444]

I'm VAGUELY familiar with WebRTC (i'm just remembering I saw the term appear today when I was googling stuff like "view ip address behind VPN" and i was looking for jsfiddle's to test this).

If WebRTC is enabled? Does it essentially allow to view my ip under a VPN? I'm going to check if it's enabled now.

As far as I know yes.

Test using https://whoer.net and scroll down to webrtc. mine says N/A because im using opera and turned it off in the settings. for chrome you might need an addon or about:config and disable peerconnect something

 

[BiffTannen1]

As far as I know yes.

Test usingand scroll down to webrtc. mine says N/A because im using opera and turned it off in the settings. for chrome you might need an addon or about:config and disable peerconnect something

First of all - thank you very much for giving me your thoughts. I really appreciate this.

So i've confirmed WebRTC is enabled. But i'm struggling to understand what that can reveal? I think at most it can reveal the local IP address, but ive tested with my VPN and its a different local ip address then when im not on the VPN. So what exactly can it be used for to detect my PC if im under VPN? (I used this site to test diafygi.github.io/webrtc-ips/)

But definitely going to disable it and this is one-hundred percent something i didnt know about so i'm further ahead then I was before.

 

[BiffTannen1]

I feel like if 1) Your IP is protected by VPN and 2) you have a unique email and 3) unique ad content and 4) your ad's are all approved

and then all of a sudden after making more accounts, every account youve made over past 2 days gets ad's deleted..... then the only thing remaining that's exposed would be like your user-agent/browser data which there is a fair amount of. Screen resolution / browser type/ apparently data on fonts etc. I'm sure you could make some correlation of machine based on that? Maybe i'm clasping at straws here and hoping there's other things i don't know about. I know it cannot be MAC address as thats not exposed publicly

 

[HoNeYBiRD]

Use something like Multiloginapp, which deals with browser fingerprinting, webrtc leakage and see if that helps.

 

[BiffTannen1]

Thank you for this! I'm just really more-so curious then anything on how they're doing it. I found a couple leak test websites for webrtc and it didnt look to expose my real ip address at all. Is there anything else it could possibly be?

 

[KHer0]

To make long story short, there are dozens upon dozens of fingerprints that can be used

Here is a very small tip that will make ur life a lot easier : Unmanaged VPS

 

[HoNeYBiRD]

Is there anything else it could possibly be?

What you wrote above, what i was referring to as browser fingerprinting. Besides MAC address, there is hardware id too, which can be tracked. But most sites don't go to this length and it's enough, if you change ip, browser fingerprint and delete cookies, but maybe kijiji is an exception.

 

[stack paper]

Save yourself the hassle and go download the free version of multiloginapp (allows you 10x profiles) -- Made the switch last year and haven't looked back. Awesome piece of software.

 

[Nut-Nights]

As far as i know VPN doesn't work with Classifieds.

 

[BiffTannen1]

As far as i know VPN doesn't work with Classifieds.

Thats a pretty broad answer. Do you know specifically if they don't work with Kijiji? I believe they do if you're smart about it. I can't speak for other Classified sies though, but being specific to Kijiji I can say they do to some extent

 

[BiffTannen1]

To make long story short, there are dozens upon dozens of fingerprints that can be used

Here is a very small tip that will make ur life a lot easier : Unmanaged VPS

What you wrote above, what i was referring to as browser fingerprinting. Besides MAC address, there is hardware id too, which can be tracked. But most sites don't go to this length and it's enough, if you change ip, browser fingerprint and delete cookies, but maybe kijiji is an exception.

Save yourself the hassle and go download the free version of multiloginapp (allows you 10x profiles) -- Made the switch last year and haven't looked back. Awesome piece of software.

Just wanted to say thank you for the three of you.I will look into unmanaged VPS as well as Multiple Login App(although hopefully this isn't your company or you have no affiliation with them). I really appreciate your input. I feel smarter already because of you guys.

Cheers

 

[BiffTannen1]

One more question. What if i need more then 10 browser profiles? Any advice to those who have used Multi Login App? Can I use say 10 browser profiles to make 50 accounts on Kijiji?

Thanks again

 

[HoNeYBiRD]

One more question. What if i need more then 10 browser profiles? Any advice to those who have used Multi Login App? Can I use say 10 browser profiles to make 50 accounts on Kijiji?

Thanks again

You can use 10 profiles simultaneously, you can delete profiles and create new ones or you can always pay for the tool.

 

[BiffTannen1]

You can use 10 profiles simultaneously, you can delete profiles and create new ones or you can always pay for the tool.

I looked into Multilogin last night and all I have to say is thank you. I will be purchasing 100%. Cheers.

 

[sukasuka]

free version of multiloginapp lack of critical features,

now i use ndalang, it is free too for 5 device profiles, but with all features just like the pro one.
and their pro version is much cheaper then MLA.
juat my 2 cents

 

[doepjohn]

Are you using ipv6 by any chance? ipv6 addresses can leak. Might be worth checking: http://ipv6leak.com/

 

[stackbread123]

Could be several things aside from the most obvious one - IP
Screen Resolution
Same ISP provider
WebRTC Leaks
Cookies
Flash Cookies
The Same outdated browser/OS version.

They noticed a pattern, probably that all of your account IPs were from the same area/ISP, that all of them used the same screen resolution (1920x1080 for example) and the same browser etc.
Did you scrub the ad image exif data? If not, that could be a problem - Always run an image through photoshop before putting up an ad with it, put a dot or two randomly, change the color saturation a bit etc.