I have used the Tor Browser to login to my google account multiple times, and in each instance I am marked as using the same device in "Recently used devices," even if I am connecting via a different exit node. When I connected via the Tor Browser running inside a virtual machine, Google correctly identified me as using a different device.

Scripts are enabled globally in my browser, and cookies are allowed but obviously deleted at the end of a session.

Does my browser have some vulnerability that allows Google to recognize me each time I login?

  • My guess is that it's likely a change of fingerprint, for example the browser window size would probably differ between the VM and your desktop and can be detected by javascript. It's suggested they use a series of different methods to identify the device and determine if it is significantly different from previous fingerprints. See: stackoverflow.com/questions/19552810/…
    – cacahuatl
    Nov 5 '16 at 2:28
  • @canonizingironize Thanks, that makes a lot of sense.
    – NEROtick
    Nov 8 '16 at 2:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.