7 votes
Accepted

Most common TOR browser configuration - panopticlick

This approach of trying to shoehorn yourself into the middle of the bellcurve is ultimately destined to fail. Part of the problem is that you seem to be viewing each part of the various things they ...
  • 10.8k
4 votes
Accepted

Why does Panopticlick tell me the new Tor Browser is unique?

Panopticlick works by comparing your browser's fingerprint with what it has seen so far. So when you're the first or one of the first users that access it with a new version, it hasn't recorded data ...
  • 2,209
4 votes

Nature of HTML5 Canvas fingerprinting

Yes, A and B could collude and identify the two users as being the same person with a substantial certitude1. If one of them has access to identifying information (IP address, name, email, etc.), the ...
  • 460
4 votes

Is it safe to resize Tor Browser window with JavaScript disabled completely?

CSS can also measure your window width and height and send it back to the server. See the demo here: https://arthuredelstein.github.io/tordemos/media-query-fingerprint.html
4 votes
Accepted

Minimizing risks of fingerprinting

Some obvious anonymity fails: checking your Gmail, etc. logging into your Facebook account using a fake Facebook account, but friending your true-name friends tweeting your true-name friends having ...
  • 2,989
4 votes
Accepted

Tor browser user-agent strings

Tor browser user-agent strings at this point in time Dec-31-2014 for the current version is: Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0 In the past Tor browser has used many ...
  • 3,236
4 votes

how to send email anonymous from Gmail

You can't. If you want to stay anonymous, you cannot send an email through Gmail as you will lose your anonymity. One of the main things not to do while using Tor is to use Google services since your ...
  • 899
4 votes

how to send email anonymous from Gmail

If you want to stay anonymous, you need to think about every step when using your mail provider. Registering your account Accessing your mail account Reading your mails Writing your mails You have ...
  • 8,673
3 votes
Accepted

Why does Tor Browser screen size vary across monitors?

Screen sizes differ between laptops, a hard set screensize would result on a browser that was too small for users on one system or too large to even display on other systems. Instead it picks a size ...
  • 10.8k
3 votes
Accepted

Tor TLS cipher suite negotiation and fingerprint defense

Today, Tor is moving away from looking like TLS, with pluggable transports being the solution for censored users. Tor is moving to using stronger cryptographic primitives so looking like a browser is ...
  • 2,209
2 votes

Random user agent in Tor Browser

All Tor browsers has standardized user agent which helps to make Tor users to be less distinguishable from each other. By changing your user agent periodically, you are making yourself more unique ...
2 votes

How to use a common screen size?

For Windows (the OP does not specify an OS), I've used this shareware utility for years -- can't vouch for it beyond saying I've never had any problems (technical nor malware-related) with it in 5+ ...
2 votes

Tails added Ublock Origin is this as bad as it looks?

No. This is no different from the fact that Tails used to ship with AdBlock Plus, it's just a different extension. Yes, it's fingerprintable but they can only tell you're using Tails. No, it doesn'...
  • 10.8k
2 votes

Is manually resizing the Tor window dangerous?

Yes, it is harmful for the duration of the window at that size. Specifically, manually resizing it will create a very unique fingerprint for your window size, which will persist until Tor Browser is ...
  • 10.8k
2 votes
Accepted

Is there a list of API's that TOR browser blocks

Tor doesn't block APIs (this is virtually impossible and probably not what you want to do), Tor blocks web pages which addresses match a given check on a blacklist or entire types of content like ...
  • 290
2 votes

Tor vs Brave - which is technically more effective to hinder user tracking - fingerprint generalization or randomization?

I think you're not going to get a lot of good answers because no one has done a study comparing the two in detail and AFAIK that hasn't been done yet. If we think about it, The Tor Project wants ...
  • 2,151
1 vote

Does Tor bundle discards cookies from a window or only from a session?

They're discarded on a per-session basis. Using the 'New Tor Circuit for this Site' will only cause Tor Browser to use a new circuit for the site, it will not clear any other information. That is ...
  • 10.8k
1 vote
Accepted

Canvas fingerprinting: default to never for all websites

"Since it is clear that one does not want canvas fingerprinting..." Actually, it's not. The canvas fingerprinting warning happens when a site tries to read the contents of a <canvas> element. ...
  • 10.8k
1 vote

Should I change the timezone of my laptop to UTC?

The Tor daemon doesn't leak timezone, if it did it would split users anonymity sets. Relays shouldn't be able to distinguish sets of users, this would allow them to and would break some of the ...
  • 10.8k
1 vote

How to import Tor Browser profile

There are numerous patches applies to FireFox ESR to make Tor Browser, so you cannot make one just with configuration options and extensions.
1 vote
Accepted

Are there Tor modifications that do NOT expose uniqueness?

It seems that using a simple appearance add-on will not increase the uniqueness of your browser fingerprint (unless it weirdly modified any of the items below). No, moving those UI items shouldn't ...
  • 86
1 vote

Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques

how we can modify Tor browser to hide these footprints and look like a normal firefox user? You cannot, some of Tor Browsers changes are hard coded patches. Trying to undo some of them by ...
  • 10.8k
1 vote

Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques

I do not think it is the intention of Tor to be undetectable, rather it is designed to make you indistinguishable from others. According to this post in SO, a browser can be a TBB if it: Has a User-...
  • 708
1 vote

Do 'window.innerWidth' and 'window.innerHeight' in CSS pass back the values to the webserver?

Yes, an attacker can easily pass the value to a web server by using the triggered (size-specific) CSS rule to load a remote resource that encodes the size in its URL. You can even make this pretty ...
  • 11
1 vote

Is Ubuntu amnesic like Tails?

If you are an expert at internet security and anonymity, you may configure Ubuntu to work for you. But if you are not a security and anonymity expert, use Tails until you get enough expertise and ...
  • 3,236
1 vote

Is Ubuntu amnesic like Tails?

Ubuntu is not a privacy-focused distro, quite the opposite. Ubuntu does not wipe the memory. Ubuntu does not prevent fingerprinting. Tails has many great security optimisations, including firewalling,...
  • 11
1 vote

what is the Rendezvous point identity ID

The Rendezvous point identity ID is, as far as I can tell, just the Fingerprint of the Relay, being used as the Rendezvous point. These digests are hexed and use '$' as its prefix. The ID of the ...
  • 134

Only top scored, non community-wiki answers of a minimum length are eligible