Timeline for Most common TOR browser configuration - panopticlick
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 7, 2016 at 10:55 | vote | accept | Zelphir Kaltstahl | ||
| Jun 7, 2016 at 0:30 | history | edited | cacahuatl | CC BY-SA 3.0 |
tautology
|
| Jun 6, 2016 at 23:59 | comment | added | cacahuatl | They would be able to easily determine that you are using Tor Browser, by for example asking you to load a resource with a tag at a seconary domain that they control in a new window or by changing the window, this would mean you'd use two different circuits and show that one users traffic was exiting in multiple locations and the list of Tor exit addresses are publicly available. This behaviour is also unique to Tor Browser. Appearing as stock firefox would not work, they could determine you were using Tor Browser. | |
| Jun 6, 2016 at 23:29 | comment | added | Zelphir Kaltstahl | Also could a server differentiate between those fingerprinting method's results in a standard FF and in TOR? Because if they couldn't, then my approach would actually work (Or would they simple be able to check for TOR network exit node to determine?). One would have to compare the differences between standard FF and TOR, I guess. | |
| Jun 6, 2016 at 23:27 | comment | added | Zelphir Kaltstahl | I think I get it now. Provided, it is impossible to get around all those approaches (especially the order of the loading of resources seems hard to get around for a user, if it's really that different between browsers), it would really rather make me stand out, if I changed anything in my TOR browser to get better scores. In this case, I'd have to A: look like most FF users and be as common as possible, or B: look like TOR browser and not change anything, hoping that others didn't change anything either. Question is then what is more common. | |
| Jun 6, 2016 at 23:04 | comment | added | cacahuatl | see my updated answer | |
| Jun 6, 2016 at 23:04 | history | edited | cacahuatl | CC BY-SA 3.0 |
response to comment
|
| Jun 6, 2016 at 22:21 | comment | added | Zelphir Kaltstahl | You're stating, that an observer knows what browser I am using and that is what your argumentation is based on. If that's true, you're probably right, however, how would an observer know that? For example on this site: computec.ch/projekte/browserrecon/?s=scan it guesses wrong actually. Can you provide a website, which correctly identifies my browser, to prove your point? Found another one: whatismybrowser.com also tells me it cannot know. | |
| Jun 6, 2016 at 16:14 | history | answered | cacahuatl | CC BY-SA 3.0 |