How does browser fingerprinting compromise privacy?

Browser fingerprinting compromises privacy by combining numerous non-unique parameters of a user's browser and device configuration (e.g., user agent, installed fonts, screen resolution, plugins). While each parameter alone is not identifying, the combination creates a highly unique digital signature. This signature allows websites and trackers to differentiate and re-identify users across different browsing sessions, often without their knowledge or consent, and without relying on traditional cookies. This process enables persistent tracking of an individual's online activities.

A. While tracking can lead to security issues, fingerprinting's primary function is identification and tracking, which is a privacy compromise, not inherently a security vulnerability like an exploit.
C. This describes phishing or social engineering, which relies on deception to get information, a different mechanism from the passive, technical collection used in fingerprinting.
D. This is an application of tracking (like geo-targeting), but it does not explain the fundamental mechanism of how fingerprinting works to compromise privacy.

1. Eckersley, P. (2010). How Unique Is Your Web Browser? In Proceedings of the 10th International Conference on Privacy Enhancing Technologies (PETS'10). Springer-Verlag, Berlin, Heidelberg, 1–18. (This entire paper, known as the Panopticlick study, is the foundational reference for the concept). DOI: https://doi.org/10.1007/978-3-642-14527-81

2. Nikiforakis, N., et al. (2013). Cookieless monster: Exploring the ecosystem of web-based device fingerprinting. In 2013 IEEE Symposium on Security and Privacy. (pp. 541-555). The paper's introduction (Section I) describes how fingerprinting enables "long-term tracking of users" by creating a unique identifier. DOI: https://doi.org/10.1109/SP.2013.43

3. Acar, G., et al. (2014). The Web never forgets: Persistent tracking mechanisms in the wild. In Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security. (pp. 674–689). Section 2.2 discusses browser fingerprinting as a method to "uniquely identify a user's browser." DOI: https://doi.org/10.1145/2660267.2660347