Attacks and Defenses Against LLM Fingerprinting