7
votes
Accepted
Most common TOR browser configuration - panopticlick
This approach of trying to shoehorn yourself into the middle of the bellcurve is ultimately destined to fail. Part of the problem is that you seem to be viewing each part of the various things they ...
- 10.8k
4
votes
Accepted
Why does Panopticlick tell me the new Tor Browser is unique?
Panopticlick works by comparing your browser's fingerprint with what it has seen so far. So when you're the first or one of the first users that access it with a new version, it hasn't recorded data ...
- 2,209
4
votes
Nature of HTML5 Canvas fingerprinting
Yes, A and B could collude and identify the two users as being the same person with a substantial certitude1. If one of them has access to identifying information (IP address, name, email, etc.), the ...
- 460
4
votes
Is it safe to resize Tor Browser window with JavaScript disabled completely?
CSS can also measure your window width and height and send it back to the server. See the demo here:
https://arthuredelstein.github.io/tordemos/media-query-fingerprint.html
4
votes
Accepted
Minimizing risks of fingerprinting
Some obvious anonymity fails:
checking your Gmail, etc.
logging into your Facebook account
using a fake Facebook account, but friending your true-name friends
tweeting your true-name friends
having ...
- 2,989
4
votes
Accepted
Tor browser user-agent strings
Tor browser user-agent strings at this point in time Dec-31-2014 for the current version is:
Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0
In the past Tor browser has used many ...
- 3,236
4
votes
how to send email anonymous from Gmail
You can't. If you want to stay anonymous, you cannot send an email through Gmail as you will lose your anonymity. One of the main things not to do while using Tor is to use Google services since your ...
- 899
4
votes
how to send email anonymous from Gmail
If you want to stay anonymous, you need to think about every step when using your mail provider.
Registering your account
Accessing your mail account
Reading your mails
Writing your mails
You have ...
- 8,673
3
votes
Accepted
Why does Tor Browser screen size vary across monitors?
Screen sizes differ between laptops, a hard set screensize would result on a browser that was too small for users on one system or too large to even display on other systems.
Instead it picks a size ...
- 10.8k
3
votes
Accepted
Tor TLS cipher suite negotiation and fingerprint defense
Today, Tor is moving away from looking like TLS, with pluggable transports being the solution for censored users. Tor is moving to using stronger cryptographic primitives so looking like a browser is ...
- 2,209
2
votes
Random user agent in Tor Browser
All Tor browsers has standardized user agent which helps to make Tor users to be less distinguishable from each other. By changing your user agent periodically, you are making yourself more unique ...
- 324
2
votes
How to use a common screen size?
For Windows (the OP does not specify an OS), I've used this shareware utility for years -- can't vouch for it beyond saying I've never had any problems (technical nor malware-related) with it in 5+ ...
- 121
2
votes
Tails added Ublock Origin is this as bad as it looks?
No.
This is no different from the fact that Tails used to ship with AdBlock Plus, it's just a different extension.
Yes, it's fingerprintable but they can only tell you're using Tails.
No, it doesn'...
- 10.8k
2
votes
Is manually resizing the Tor window dangerous?
Yes, it is harmful for the duration of the window at that size.
Specifically, manually resizing it will create a very unique fingerprint for your window size, which will persist until Tor Browser is ...
- 10.8k
2
votes
Accepted
Is there a list of API's that TOR browser blocks
Tor doesn't block APIs (this is virtually impossible and probably not what you want to do), Tor blocks web pages which addresses match a given check on a blacklist or entire types of content like ...
- 290
2
votes
Tor vs Brave - which is technically more effective to hinder user tracking - fingerprint generalization or randomization?
I think you're not going to get a lot of good answers because no one has done a study comparing the two in detail and AFAIK that hasn't been done yet.
If we think about it, The Tor Project wants ...
- 2,151
1
vote
Does Tor bundle discards cookies from a window or only from a session?
They're discarded on a per-session basis.
Using the 'New Tor Circuit for this Site' will only cause Tor Browser to use a new circuit for the site, it will not clear any other information. That is ...
- 10.8k
1
vote
Accepted
Canvas fingerprinting: default to never for all websites
"Since it is clear that one does not want canvas fingerprinting..."
Actually, it's not. The canvas fingerprinting warning happens when a site tries to read the contents of a <canvas> element.
...
- 10.8k
1
vote
Should I change the timezone of my laptop to UTC?
The Tor daemon doesn't leak timezone, if it did it would split users anonymity sets. Relays shouldn't be able to distinguish sets of users, this would allow them to and would break some of the ...
- 10.8k
1
vote
How to import Tor Browser profile
There are numerous patches applies to FireFox ESR to make Tor Browser, so you cannot make one just with configuration options and extensions.
- 475
1
vote
Accepted
Are there Tor modifications that do NOT expose uniqueness?
It seems that using a simple appearance add-on will not increase the uniqueness of your browser fingerprint (unless it weirdly modified any of the items below). No, moving those UI items shouldn't ...
- 86
1
vote
Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques
how we can modify Tor browser to hide these footprints and look like a normal firefox user?
You cannot, some of Tor Browsers changes are hard coded patches. Trying to undo some of them by ...
- 10.8k
1
vote
Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques
I do not think it is the intention of Tor to be undetectable, rather it is designed to make you indistinguishable from others.
According to this post in SO, a browser can be a TBB if it:
Has a User-...
- 708
1
vote
Do 'window.innerWidth' and 'window.innerHeight' in CSS pass back the values to the webserver?
Yes, an attacker can easily pass the value to a web server by using the triggered (size-specific) CSS rule to load a remote resource that encodes the size in its URL. You can even make this pretty ...
- 11
1
vote
Is Ubuntu amnesic like Tails?
If you are an expert at internet security and anonymity, you may configure Ubuntu to work for you. But if you are not a security and anonymity expert, use Tails until you get enough expertise and ...
- 3,236
1
vote
Is Ubuntu amnesic like Tails?
Ubuntu is not a privacy-focused distro, quite the opposite.
Ubuntu does not wipe the memory.
Ubuntu does not prevent fingerprinting.
Tails has many great security optimisations, including firewalling,...
- 11
1
vote
what is the Rendezvous point identity ID
The Rendezvous point identity ID is, as far as I can tell, just the Fingerprint of the Relay, being used as the Rendezvous point. These digests are hexed and use '$' as its prefix.
The ID of the ...
- 134
Only top scored, non community-wiki answers of a minimum length are eligible