Questions tagged [fingerprinting]

A browser fingerprint comprises information obtained about a browser during normal use. Fingerprints can fully or partially identify individual users or devices even when cookies are turned off.

Filter by
Sorted by
Tagged with
2
votes
2answers
96 views

Resolution to prevent fingerprinting 1 pixel off?

Tor Browser is using letterboxing to prevent fingerprinting by screen size. Now, I have done a test on Cover Your Tracks website from EFF and the results show a unique fingerprint and the reason for ...
0
votes
0answers
93 views

Why doesn't the Tor browser solve the Canvas Fingerprinting issue by removing/changing the support for the function that makes this possible?

Basically, Canvas Fingerprinting works by creating a canvas element, then converting the canvas element into a unique, identifying data URL which can be used to fingerprint users. This is why the Tor ...
0
votes
1answer
146 views

Tor browser's default theme uses os's color scheme. Is it fine? Can this be used for fingerprinting?

Tor browser's default theme uses os's color scheme. Just like firefox. If os is set to dark grey colors lets say, tor uses the same palette. If os is set to shades of black, tor uses the same palette ...
3
votes
2answers
256 views

how to send email anonymous from Gmail

If I send email from gmail account using Tor browser with VPN connection can my identity be anonymous? can anyone find me out by tracking my email?
1
vote
1answer
486 views

Does Tor Browser get a unique fingerprint with JavaScript, even if HTML5 Canvas data is blocked (amiunique.org)?

Tor Browser settings Security slider is on "Safest" JavaScript is enabled (otherwise no Canvas fingerprint possible by site) "Extract Canvas Data" is blocked: Issue amiunique....
0
votes
0answers
54 views

Sync a machine's firefox bookmarks to a tor browser

Is there a way to periodically pull a linux machine's firefox bookmarks to a linux tor browser ? I mean pull and not sync because I want the URL ending in .onion that I saved in tor browser to stay ...
0
votes
1answer
345 views

Tor Browser Bundle failing userAgent spoofing

Using Tor Browser Bundle, I noticed the latest versions I have (9x) did not show user agent in the general.userAgent.override entry in about:config. The browser was downloaded from the Tor Project and ...
3
votes
2answers
275 views

Tor vs Brave - which is technically more effective to hinder user tracking - fingerprint generalization or randomization?

TOR's method to countering fingerprinting is to make as many users "appear the same" as possible, let us call this to "generalize". While Brave tries to randomize all fingerprints of each and every ...
0
votes
1answer
151 views

Does Firefox in VM have a common enough fingerprint so I don't need tor browser?

I want to know about what a web browser's fingerprint like in a VM, if VM runs a common OS and have default system settings. Can VM be configured to not have any of host machine's fingerprint? Here ...
2
votes
1answer
71 views

Is there a list of API's that TOR browser blocks

I was looking for some kind of documentation on what API's and scripts does the TOR browser blocks (mainly as a defense for fingerprinting). I have come across the Design and Implementation document ...
1
vote
0answers
47 views

What could be the cause for strange size(s) of TorBrowser window?

I tested my TorBrowser with websites like panopticlick. Then downloaded and installed a 2nd TorBrowser to test against. a) the window size is supposed to be a multiple of 100. but I get slightly ...
0
votes
0answers
83 views

How does Tor protects from the list of Digital Finger Print

I have heard that Tor protects users from sites that try to fingerprint browsing history with its integration of NoScript. But it's not completely secure as some researchers claims. Does Tor really ...
1
vote
1answer
404 views

Brave Browser's Bundled Tor reveals browser through search, is this a privacy issue?

Description When using private window Tor mode I was surprised to see that Brave passes a browser identifier in the url of the search. It seems having &t=brave in the url makes identifying the ...
0
votes
1answer
275 views

Tails v3.7 using VM = user agent Windows 7?

I'm trying to use Tails v3.7 via virtual machine. I've already tried VirtualBox, and VMware. And everything is OK, but..... when I've visited website https://2ip.ru to check my IP-address, I've ...
0
votes
1answer
123 views

I don't have an account on Flickr. Why am I shown as logged into Flickr on a fingerprinting website?

If I visit https://browserleaks.com/social using the Tor Browser, I am shown as somehow logged into Flickr. I don't even have a Flickr account. In addition to the above, visiting the same site on a ...
1
vote
4answers
6k views

Is manually resizing the Tor window dangerous?

The default Tor windows size (500x1000) I find too small and I would like to make it bigger. I understand that making Tor full screen is dangerous, as full screen resolution is device dependent, ...
1
vote
1answer
4k views

Why does Tor Browser screen size vary across monitors?

When opening Tor Browser on a laptop, the screen size reported on panopticlick is 1000x700x24 with a fingerprint of 1 in 15,000, which is not bad, I guess. Re-opening Tor Browser with an external ...
1
vote
0answers
50 views

Is the default low security level dangerous? [duplicate]

The default level is set to low which ensures compatibility with most sites and technology but is it dangerous for security and/or for anonymity?
2
votes
1answer
214 views

Does Tor bundle discards cookies from a window or only from a session?

So in firefox privacy mode afaik once you close a private window all cookies and other information related to the sites in that window are deleted independently of any data on the regular firefox ...
1
vote
0answers
338 views

Tor fonts not displayed in Panopticlick

Panopticlick detects no fonts on my Tor browser. The standard should be Wingdings2 and Wingdings3. I have disabled incognito mode and added Self-destructing cookies, uBlock Origin and changed the ...
2
votes
0answers
308 views

What are these packets sent from my Tor client at irregular intervals during a download?

I am comparing two traffic instances using Wireshark: one using Tor and the other not using Tor. In both instances, the user requests the HTML document of a web page. In both instances I first ...
1
vote
0answers
96 views

Is it possible to get some fingerprinting protection features of TBB in regular Firefox for non-Tor browsing?

I'd like to prevent Firefox from reading canvas, for example. As far as I understand, this is functionality of Tor Button extension which is part of Tor Browser Bundle, but it implies using Tor. What ...
0
votes
1answer
3k views

Tails added Ublock Origin is this as bad as it looks?

From my understanding Ublock Origin in Tails will add to the fingerprinting(websites can tell) and it opens up a new attack vector. The filters if compromised could add javascript to any website. Also,...
0
votes
2answers
272 views

Canvas fingerprinting: default to never for all websites

Since it is clear that one does not want canvas fingerprinting, is it possible to set this as the default and avoid the popup?
1
vote
2answers
562 views

Should I change the timezone of my laptop to UTC?

I understand the Tor Browser uses the UTC timezone but what about the tor daemon? Should I change the timezone on my ubuntu laptop to UTC to help make my tor traffic less fingerprintable? It wouldn't ...
3
votes
1answer
2k views

Most common TOR browser configuration - panopticlick

Yesterday I put some effort into getting the best "score" I can on Panopticlick. The following is my result: I did several things to get the lowest numbers for "unique in x browsers". I looked up ...
4
votes
1answer
350 views

Nature of HTML5 Canvas fingerprinting

I am something of a layperson, and have two questions regarding HTML5 Canvas fingerprinting. As I understand it, it allows the site to extract certain hardware and software information about the ...
1
vote
0answers
29 views

Can Firefox & Tor (on the same machine) be *seen* as the same machine? [duplicate]

Assuming a standard Win7 machine with Firefox and Tor, all auto-updated. Firefox has VLC, Silverlight, Acrobat, and OpenH264 plugins, but also locked down a tiny-bit with NoScript, HTTPS everywhere, ...
3
votes
2answers
248 views

Are there Tor modifications that do NOT expose uniqueness?

Add-ons like Flash and VLC and others are more obvious, and the general notion stands that “any add-on is a risk to make your online fingerprint unique”, but I'd still like to think a simple ...
1
vote
4answers
647 views

Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques

Tor beside anonymizing our location also make us unique as very few users actually use it on each webservice. question is in what ways destination sites can detect Tor browser? for instance canvas ...
-1
votes
1answer
70 views

Can't find the Tails subkey!

I know I've seen it somewhere but now I can't find it. Why aren't the subkeys displayed on the same page as the primary key here???: https://tails.boum.org/doc/get/trusting_tails_signing_key/index.en....
2
votes
1answer
419 views

Do 'window.innerWidth' and 'window.innerHeight' in CSS pass back the values to the webserver?

I have JavaScript turned off, and so no leakage of screen resolution to Panopticlick.eff.org fingerprint testing tool. However, JonDonym's one - ip-check.info - has an alarming-looking vector down ...
2
votes
3answers
1k views

Why does Panopticlick tell me the new Tor Browser is unique?

As soon as I download the new Tor Browser, I go to https://panopticlick.eff.org/ to see how anonymous I am. But right after a new Tor Browser release, it always tells me I'm unique! Why? I thought ...
1
vote
2answers
4k views

Can an IP address get you caught?

We need to use java scripts on some sites because we need them in order to get the task done. Suppose some site get my real IP address by using some java script attack, then how dangerous it can be? ...
1
vote
2answers
1k views

Is Ubuntu amnesic like Tails?

Is using ubuntu amnesic as Tails and therefore prevent fingerprinting? Can I use ubuntu as an alternative to Tails? I think ubuntu too only use the RAM and destroy all memory after shutting down, and ...
6
votes
2answers
5k views

Will disabling caching in Tor Browser increase anonymity, or decrease it?

I have stumbled upon the idea of disabling cache - completely. On one hand, I am thinking that due to having to load all elements afresh when visiting a page, I appear more like a fresh 'New Identity'...
5
votes
4answers
28k views

Tor browser user-agent strings

What is the current user-agent string(s) of the Tor browser? What user-agent strings has the Tor browser (and older Tor software) used in the past?
2
votes
1answer
2k views

How to import Tor Browser profile

To make a Tor Browser from Firefox ESR there are many settings should be changed for the about:config, so can I have a way to change these values in a shorter time or can I directly use Tor Browser in ...
3
votes
1answer
292 views

Tor TLS cipher suite negotiation and fingerprint defense

In reading this bug I can see that, in the past, Tor has been fingerprinted based on the cipher suites negotiated in the initial TLS handshake. Originally it looks like a copy of the cipher suites in ...
5
votes
1answer
4k views

Is it safe to resize Tor Browser window with JavaScript disabled completely?

Recent Tor Browsers (as of writing, current stable version is 3.6.5) resize the browser window to a multiple of 200x100 pixels on opening. I understand this is to reduce the chances of a user being ...
1
vote
2answers
170 views

Minimizing risks of fingerprinting

Assuming the latest Tor bundle is being used, what additional steps could be taken to reduce the ease of some attacker connecting the dots among fingerprint data and getting closer to an identity? ...
3
votes
1answer
110 views

what is the Rendezvous point identity ID

I am currently reading the specification for rendezvous point and one little point has got me confused. When constructing a packet to send to from Alice's OP to Introduction Point it asks for the ...
3
votes
3answers
301 views

If my web browser is fingerprintable (say, odd window size/screen resolution), who gets to see it?

Does browser fingerprinting leak data only to the server that is answering my request, or also to my ISP or other network-level eavesdropper? Assuming HTTPS (HTTP should leak to the HTTPS "leak set" ...
1
vote
1answer
6k views

Downthemall addon safe

I need to download set of files, it's easy to do in queue with downthemall addon (concurrent download setting = 1) . Is it safe to get the files with addon, will it still save via Tor? Will the file ...
1
vote
1answer
82 views

Is it possible to link different uses of Tor by using normal changes to the browser (such as bookmarks)?

Is it possible to link different Tor identies (uses of Tor at different times) by using the Bookmarks, settings of various components of the browser, or cosmetic alterations to the toolbars? It has ...
2
votes
1answer
665 views

Fingerprint effect of changing TBB default font size

I asked this on tor-talk (no answers) & through Tor email support (also no answer). Suggested trying here. Does changing the default font names or sizes used by TBB (3.51 - 3.5.2) for Windows, ...
6
votes
2answers
1k views

How can I improve my SSL/TLS security?

I recently visited https://www.howsmyssl.com/ with TorBrowser Bundle 3.5 and the rating was alarming. In particular, the site informed me that the cipher SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA was ...
6
votes
3answers
6k views

Random user agent in Tor Browser

I am currently using a Firefox Add-on which generates a random user agent string from a large list of user agents. I am trying to protect myself from organisations and governments with a lot of ...
7
votes
3answers
734 views

Using Tails, is one identified as Tails user or as general Tor user?

Tor users can be identified as Tor users one way or the other. Now Tails users are subset of Tor users. Can this subset be identified as Tails users? Or this subset can not be distinguished from other ...
9
votes
5answers
11k views

Have Tor appear to be a different browser

I was wondering is there a way to fool websites into thinking that I am using another browser instead of what I'm really using, Tor Browser. Say I wanted example.com to see me connecting to them using ...