Persistent Hardware Fingerprinting · Cross-Browser · Anti-Evasion

Impronta is a probabilistic, hardware-invariant identity tracking system. Unlike traditional cookie or localStorage-based tracking, Impronta captures physical hardware signatures that persist across:

• Browser restarts and incognito mode
• Storage/cookie clears
• Different browsers on the same device
• Different OS user sessions on the same machine

Successfully tested on: Chrome, Firefox, Brave (Shields ON), Opera, GNOME Web (WebKit), Falkon (QtWebEngine), qutebrowser — all returning 100% correlated identity on the same physical machine.

┌─────────────────────────────────┐
│          Client Browser         │
│  supercookie-async.js (LEX)     │
│  ┌───────────────────────────┐  │
│  │  F-Cache  │  Hardware     │  │
│  │  (Read)   │  Tokens (11+) │  │
│  └───────────┴───────────────┘  │
└──────────────┬──────────────────┘
               │ HTTPS
┌──────────────▼──────────────────┐
│         Express Server          │
│  /api/session/start             │
│  /api/session/finish  (YACC)    │
│       AFND Scoring Engine       │
│  ┌───────────────────────────┐  │
│  │  SQLite WAL (impronta.db) │  │
│  └───────────────────────────┘  │
└─────────────────────────────────┘

The system is currently running in an isolated live environment for tracking and fingerprint profiling:

• https://fingerprint.tribrs.us

When astrobiology analyzes the spectrum of a distant planet searching for life, it doesn't look for "skyscrapers" or "humans" (which are temporary constructs). It searches for thermodynamic invariants or methane that persist despite cosmic noise and thick atmospheres.

Impronta utilizes this exact same analytical paradigm, but applied to silicon. It does not try to identify the user through "User-Agent", "Screen Resolution", or "Local Cookies" (which are obfuscated and unstable "atmospheres" that the user or browser can clear or spoof at will — e.g., Brave Shields, Tor Browser).

Instead, Impronta interrogates the physical core of the device. It constructs a Non-Deterministic Finite Automaton (NFA) coupled with a Dynamic Weight Matrix. If the algorithm detects that a browser is injecting "intentional noise" (Jittering) into timers (performance.now) to evade tracking, the instability increases mathematical variance (Entropy). The NFA reacts in real-time by removing weight (tracking authority) from the CPU clock and transferring it toward more stable invariants of the underlying machine during that millisecond, such as sustained GPU load or the physical degradation of the disk sector.

In the end, it profiles the real hardware, stripping it of its software "spacesuit".

Asymmetric collection is performed across 16 spectral dimensions. Below are the high-level physical hardware inspections executed by the asynchronous algorithm, detailing how they operate and their ultimate purpose.

Dynamic Similarity Threshold: The Clustering engine assigns diverse devices a single shared master_id (Persona) when the total mathematical convergence over the NFA surpasses a weighted confidence of >85%.

• Node.js 18+
• npm

git clone https://github.com/pab10v/impronta.git
cd impronta
npm install
node server.js
# Open http://localhost:3000

Set the following environment variable in your cPanel Node.js configuration:

BASE_PATH=/app

This will prefix all routes: https://yourdomain.com/app/api/session/start, https://yourdomain.com/app/admin.html, etc.

cPanel Node.js App Settings:

• Application Root: impronta/
• Application URL: /app (or your chosen sub-path)
• Application Startup File: server.js
• Environment Variables: BASE_PATH=/app, PORT=3000 (or as assigned by cPanel)

Starts a fingerprinting session.

Body: { action: "read" | "write", uid?: string }
Returns: { sid: string, uid?: string }

Serves an iframe for favicon bit-read (F-Cache layer).

Serves/reads individual favicon cache bits.

Finalizes the session, runs the AFND prediction engine.

Body: { sid, hardwareTokens, updateProfile?: boolean }
Returns: { uid: string, method: "f-cache" | "prediction" | null }

Admin endpoint. Returns all identities with optional spectral similarity scores.

Permanently deletes an identity and its hardware profile.

Navigate to /admin.html to:

• View all registered identities with their binary sequence (F-Cache vector)
• Select any identity as a "base" and compare its spectral similarity against all others
• Delete individual identities for clean test cycles

impronta/
├── server.js              # Express server + AFND prediction engine
├── impronta.db            # SQLite database (auto-created)
├── logs/
│   └── predictive.log     # Process and prediction audit log
├── public/
│   ├── index.html         # Demo client page
│   ├── admin.html         # Admin/audit dashboard
│   └── supercookie-async.js  # Client-side LEX (hardware collector)
└── tests/
    └── simulate_cross_browser_fixed.js   # Offline prediction simulation

MIT © 2026

Javier Valle artesanous@endev.us