Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [fingerprinting]

A browser fingerprint comprises information obtained about a browser during normal use. Fingerprints can fully or partially identify individual users or devices even when cookies are turned off.

0
votes
0answers
44 views

How does Tor protects from the list of Digital Finger Print

I have heard that Tor protects users from sites that try to fingerprint browsing history with its integration of NoScript. But it's not completely secure as some researchers claims. Does Tor really ...
0
votes
1answer
127 views

Brave Browser's Bundled Tor reveals browser through search, is this a privacy issue?

Description When using private window Tor mode I was surprised to see that Brave passes a browser identifier in the url of the search. It seems having &t=brave in the url makes identifying the ...
0
votes
0answers
33 views

Fingerprinting third generation hidden services

It is known that it is possible for an observer between a Tor client and the guard relay to detect whether or not the client is attempting to connect to a hidden service (although it is not currently ...
0
votes
1answer
127 views

Tails v3.7 using VM = user agent Windows 7?

I'm trying to use Tails v3.7 via virtual machine. I've already tried VirtualBox, and VMware. And everything is OK, but..... when I've visited website https://2ip.ru to check my IP-address, I've ...
0
votes
1answer
95 views

I don't have an account on Flickr. Why am I shown as logged into Flickr on a fingerprinting website?

If I visit https://browserleaks.com/social using the Tor Browser, I am shown as somehow logged into Flickr. I don't even have a Flickr account. In addition to the above, visiting the same site on a ...
1
vote
3answers
1k views

Is manually resizing the Tor window dangerous?

The default Tor windows size (500x1000) I find too small and I would like to make it bigger. I understand that making Tor full screen is dangerous, as full screen resolution is device dependent, ...
1
vote
1answer
1k views

Why does Tor Browser screen size vary across monitors?

When opening Tor Browser on a laptop, the screen size reported on panopticlick is 1000x700x24 with a fingerprint of 1 in 15,000, which is not bad, I guess. Re-opening Tor Browser with an external ...
1
vote
0answers
38 views

Is the default low security level dangerous? [duplicate]

The default level is set to low which ensures compatibility with most sites and technology but is it dangerous for security and/or for anonymity?
2
votes
1answer
107 views

Does Tor bundle discards cookies from a window or only from a session?

So in firefox privacy mode afaik once you close a private window all cookies and other information related to the sites in that window are deleted independently of any data on the regular firefox ...
1
vote
0answers
252 views

Tor fonts not displayed in Panopticlick

Panopticlick detects no fonts on my Tor browser. The standard should be Wingdings2 and Wingdings3. I have disabled incognito mode and added Self-destructing cookies, uBlock Origin and changed the ...
2
votes
0answers
145 views

What are these packets sent from my Tor client at irregular intervals during a download?

I am comparing two traffic instances using Wireshark: one using Tor and the other not using Tor. In both instances, the user requests the HTML document of a web page. In both instances I first ...
1
vote
0answers
81 views

Is it possible to get some fingerprinting protection features of TBB in regular Firefox for non-Tor browsing?

I'd like to prevent Firefox from reading canvas, for example. As far as I understand, this is functionality of Tor Button extension which is part of Tor Browser Bundle, but it implies using Tor. What ...
0
votes
1answer
2k views

Tails added Ublock Origin is this as bad as it looks?

From my understanding Ublock Origin in Tails will add to the fingerprinting(websites can tell) and it opens up a new attack vector. The filters if compromised could add javascript to any website. Also,...
1
vote
2answers
215 views

Canvas fingerprinting: default to never for all websites

Since it is clear that one does not want canvas fingerprinting, is it possible to set this as the default and avoid the popup?
1
vote
2answers
395 views

Should I change the timezone of my laptop to UTC?

I understand the Tor Browser uses the UTC timezone but what about the tor daemon? Should I change the timezone on my ubuntu laptop to UTC to help make my tor traffic less fingerprintable? It wouldn't ...
3
votes
1answer
1k views

Most common TOR browser configuration - panopticlick

Yesterday I put some effort into getting the best "score" I can on Panopticlick. The following is my result: I did several things to get the lowest numbers for "unique in x browsers". I looked up ...
3
votes
1answer
296 views

Nature of HTML5 Canvas fingerprinting

I am something of a layperson, and have two questions regarding HTML5 Canvas fingerprinting. As I understand it, it allows the site to extract certain hardware and software information about the ...
1
vote
0answers
24 views

Can Firefox & Tor (on the same machine) be *seen* as the same machine? [duplicate]

Assuming a standard Win7 machine with Firefox and Tor, all auto-updated. Firefox has VLC, Silverlight, Acrobat, and OpenH264 plugins, but also locked down a tiny-bit with NoScript, HTTPS everywhere, ...
2
votes
2answers
194 views

Are there Tor modifications that do NOT expose uniqueness?

Add-ons like Flash and VLC and others are more obvious, and the general notion stands that “any add-on is a risk to make your online fingerprint unique”, but I'd still like to think a simple ...
1
vote
3answers
545 views

Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques

Tor beside anonymizing our location also make us unique as very few users actually use it on each webservice. question is in what ways destination sites can detect Tor browser? for instance canvas ...
-1
votes
1answer
53 views

Can't find the Tails subkey!

I know I've seen it somewhere but now I can't find it. Why aren't the subkeys displayed on the same page as the primary key here???: https://tails.boum.org/doc/get/trusting_tails_signing_key/index.en....
2
votes
1answer
352 views

Do 'window.innerWidth' and 'window.innerHeight' in CSS pass back the values to the webserver?

I have JavaScript turned off, and so no leakage of screen resolution to Panopticlick.eff.org fingerprint testing tool. However, JonDonym's one - ip-check.info - has an alarming-looking vector down ...
2
votes
3answers
670 views

Why does Panopticlick tell me the new Tor Browser is unique?

As soon as I download the new Tor Browser, I go to https://panopticlick.eff.org/ to see how anonymous I am. But right after a new Tor Browser release, it always tells me I'm unique! Why? I thought ...
1
vote
2answers
3k views

Can an IP address get you caught?

We need to use java scripts on some sites because we need them in order to get the task done. Suppose some site get my real IP address by using some java script attack, then how dangerous it can be? ...
1
vote
2answers
841 views

Is Ubuntu amnesic like Tails?

Is using ubuntu amnesic as Tails and therefore prevent fingerprinting? Can I use ubuntu as an alternative to Tails? I think ubuntu too only use the RAM and destroy all memory after shutting down, and ...
5
votes
2answers
4k views

Will disabling caching in Tor Browser increase anonymity, or decrease it?

I have stumbled upon the idea of disabling cache - completely. On one hand, I am thinking that due to having to load all elements afresh when visiting a page, I appear more like a fresh 'New Identity'...
2
votes
1answer
17k views

Tor browser user-agent strings

What is the current user-agent string(s) of the Tor browser? What user-agent strings has the Tor browser (and older Tor software) used in the past?
2
votes
1answer
2k views

How to import Tor Browser profile

To make a Tor Browser from Firefox ESR there are many settings should be changed for the about:config, so can I have a way to change these values in a shorter time or can I directly use Tor Browser in ...
3
votes
1answer
210 views

Tor TLS cipher suite negotiation and fingerprint defense

In reading this bug I can see that, in the past, Tor has been fingerprinted based on the cipher suites negotiated in the initial TLS handshake. Originally it looks like a copy of the cipher suites in ...
4
votes
1answer
2k views

Is it safe to resize Tor Browser window with JavaScript disabled completely?

Recent Tor Browsers (as of writing, current stable version is 3.6.5) resize the browser window to a multiple of 200x100 pixels on opening. I understand this is to reduce the chances of a user being ...
1
vote
2answers
144 views

Minimizing risks of fingerprinting

Assuming the latest Tor bundle is being used, what additional steps could be taken to reduce the ease of some attacker connecting the dots among fingerprint data and getting closer to an identity? ...
3
votes
1answer
88 views

what is the Rendezvous point identity ID

I am currently reading the specification for rendezvous point and one little point has got me confused. When constructing a packet to send to from Alice's OP to Introduction Point it asks for the ...
3
votes
3answers
248 views

If my web browser is fingerprintable (say, odd window size/screen resolution), who gets to see it?

Does browser fingerprinting leak data only to the server that is answering my request, or also to my ISP or other network-level eavesdropper? Assuming HTTPS (HTTP should leak to the HTTPS "leak set" ...
1
vote
1answer
4k views

Downthemall addon safe

I need to download set of files, it's easy to do in queue with downthemall addon (concurrent download setting = 1) . Is it safe to get the files with addon, will it still save via Tor? Will the file ...
1
vote
1answer
75 views

Is it possible to link different uses of Tor by using normal changes to the browser (such as bookmarks)?

Is it possible to link different Tor identies (uses of Tor at different times) by using the Bookmarks, settings of various components of the browser, or cosmetic alterations to the toolbars? It has ...
2
votes
1answer
466 views

Fingerprint effect of changing TBB default font size

I asked this on tor-talk (no answers) & through Tor email support (also no answer). Suggested trying here. Does changing the default font names or sizes used by TBB (3.51 - 3.5.2) for Windows, ...
6
votes
2answers
1k views

How can I improve my SSL/TLS security?

I recently visited https://www.howsmyssl.com/ with TorBrowser Bundle 3.5 and the rating was alarming. In particular, the site informed me that the cipher SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA was ...
6
votes
3answers
5k views

Random user agent in Tor Browser

I am currently using a Firefox Add-on which generates a random user agent string from a large list of user agents. I am trying to protect myself from organisations and governments with a lot of ...
7
votes
3answers
627 views

Using Tails, is one identified as Tails user or as general Tor user?

Tor users can be identified as Tor users one way or the other. Now Tails users are subset of Tor users. Can this subset be identified as Tails users? Or this subset can not be distinguished from other ...
8
votes
4answers
9k views

Have Tor appear to be a different browser

I was wondering is there a way to fool websites into thinking that I am using another browser instead of what I'm really using, Tor Browser. Say I wanted example.com to see me connecting to them using ...
9
votes
2answers
2k views

How can I check if a Firefox plugin is a deanonymization threat?

There are many useful Firefox plugins and extensions that are compatible with the Tor Browser Bundle - how do I know which ones are safe to install without compromising my Tor anonymization?
4
votes
2answers
4k views

How to use a common screen size?

Using the Tor Browser, one thing I've noticed while looking at the EFF's Panopticon browser fingerprinting tool is that the screen size reported matches the dimensions of the browser window. While ...
2
votes
2answers
668 views

ISP, WiFi, Tracking [duplicate]

I run Tor on my laptop and my phone. I have Verizon Wireless for a service provider. My laptop Internet connection is tethered through my cell phone. So I just run Tor on my laptop. Can Verizon or any ...
7
votes
1answer
3k views

Is it dangerous to watch videos full screen on Tor Browser?

When watching HTML5 videos on Tor Browser, is it dangerous to go full screen? Can this be used to find out my screen resolution? Especially wondering this for Youtube.
11
votes
2answers
1k views

How does check.torproject.org know if TBB is up to date?

If all TBB versions have the same user-agent/fingerprinting, then how does torcheck check if TBB is up to date? How the "know if I'm up to date" system works?
11
votes
3answers
2k views

Why shouldn't one run Firefox/Chrome/any browser behind a fully torified system?

One can fully torify a system using Qubes OS TorVM, Whonix or a custom transparent proxy. Everything gets torified, even Adobe Flash. Why should one use Tor Browser even though everything is already ...
10
votes
2answers
671 views

What is browser fingerprinting? What is linkability?

What do people refer to when they talk about browser fingerprinting? What is the difference between browser fingerprinting and linkability? Why is it important? For what is it used?
5
votes
3answers
939 views

Tor fingerprinting on NSA Egotisticalgiraffe document

On page 11 and 12 of this document: http://www.theguardian.com/world/interactive/2013/oct/04/egotistical-giraffe-nsa-tor-document they say it's easy to dinstinguish Tor users from non-Tor users ...
8
votes
1answer
905 views

What does the Tor Browser Bundle do to prevent the linking of sessions?

What changes are made to the Tor Brower Bundle or what does it ship with to prevent a website from linking user session together, including fingerprinting on the device such as browser or system ...
7
votes
3answers
1k views

How can website fingerprinting be prevented?

Recent research [PDF] has shown that website fingerprinting works with Tor. Website fingerprinting = Determine what website is visited based on certain characteristics even when encryption is applied....