English · Русский
I work on the parts of the web that identify you without asking — canvas, WebGL, font metrics, timezone, screen geometry — and on making them report something else, consistently enough to survive cross-checking. A spoof that contradicts itself is worse than none: it makes you more distinctive, not less.
Fingerprint resistance. Coherent profiles rather than scattered navigator
overrides. Verified against CreepJS, BrowserLeaks, Pixelscan and AmIUnique.
Patched Chromium and extensions. When a flag is not enough, the patch series is. Manifest V3, WebAssembly cores, isolated and main-world injection.
Windows privacy tooling. C# and PowerShell. Telemetry off — and still off after the next feature update, because something has to keep watching.
Automation. Job applications, latency checks, and the browser workflows worth writing down once.
Every repository below ships CI, a security policy, issue templates and documentation in both English and Russian.
| Languages | JavaScript · TypeScript · C# · C++ · Python |
| Runtime and build | WebAssembly · Node.js · .NET Framework 4.8 · PowerShell · Bash |
| Targets | Chromium · Chrome extensions (Manifest V3) · Windows 10 and 11 |
| Tooling | Git · GitHub Actions · Visual Studio · VS Code |
|
One coherent invented machine — the same one in the window, in every frame and in every worker. A claim the layout can contradict produces a machine that cannot exist, which is rarer than the one you started from. 40 suites, and a Limits section naming the sixteen things it knowingly does not close.
|
Disables Microsoft's data collection, shows what has already been collected about this machine, and keeps checking on a schedule — because feature updates quietly restore what you turned off.
|
|
Applies to hh.ru vacancies behind five layers of defence — 26 WebAssembly functions, 32 blocked trackers, 11 intercepted APIs — so the site cannot profile the machine doing it.
|
The same idea without an extension: one injected script that checks what you have already applied to, fills in the cover letter and turns the pages.
|
|
Response time for any site from the Chrome toolbar. Type an address, get
milliseconds. No account, no configuration, and
|
Chrome MV3 instrument, not a blocker: a journal of which script read which fingerprinting surface, and outgoing beacons parsed field by field — "this is a hash of your email" instead of base64
|
Privacy isn't a setting. It's an engineering budget.
