7 votes
Accepted

Most common TOR browser configuration - panopticlick

This approach of trying to shoehorn yourself into the middle of the bellcurve is ultimately destined to fail. Part of the problem is that you seem to be viewing each part of the various things they ...
user avatar
  • 10.8k
5 votes
Accepted

If my web browser is fingerprintable (say, odd window size/screen resolution), who gets to see it?

When using Tor the metadata provided by your browser (the data primarily used for fingerprinting) is only accessible to the server as all communication between you and the server is encrypted. If you ...
user avatar
  • 1,654
4 votes

Nature of HTML5 Canvas fingerprinting

Yes, A and B could collude and identify the two users as being the same person with a substantial certitude1. If one of them has access to identifying information (IP address, name, email, etc.), the ...
user avatar
  • 460
4 votes
Accepted

Tor browser user-agent strings

Tor browser user-agent strings at this point in time Dec-31-2014 for the current version is: Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0 In the past Tor browser has used many ...
user avatar
  • 3,226
4 votes
Accepted

Why does Panopticlick tell me the new Tor Browser is unique?

Panopticlick works by comparing your browser's fingerprint with what it has seen so far. So when you're the first or one of the first users that access it with a new version, it hasn't recorded data ...
user avatar
  • 2,209
4 votes

Is it safe to resize Tor Browser window with JavaScript disabled completely?

CSS can also measure your window width and height and send it back to the server. See the demo here: https://arthuredelstein.github.io/tordemos/media-query-fingerprint.html
user avatar
4 votes
Accepted

Minimizing risks of fingerprinting

Some obvious anonymity fails: checking your Gmail, etc. logging into your Facebook account using a fake Facebook account, but friending your true-name friends tweeting your true-name friends having ...
user avatar
  • 2,989
4 votes

how to send email anonymous from Gmail

If you want to stay anonymous, you need to think about every step when using your mail provider. Registering your account Accessing your mail account Reading your mails Writing your mails You have ...
user avatar
  • 8,643
3 votes
Accepted

Tor TLS cipher suite negotiation and fingerprint defense

Today, Tor is moving away from looking like TLS, with pluggable transports being the solution for censored users. Tor is moving to using stronger cryptographic primitives so looking like a browser is ...
user avatar
  • 2,209
3 votes
Accepted

Why does Tor Browser screen size vary across monitors?

Screen sizes differ between laptops, a hard set screensize would result on a browser that was too small for users on one system or too large to even display on other systems. Instead it picks a size ...
user avatar
  • 10.8k
3 votes

how to send email anonymous from Gmail

You can't. If you want to stay anonymous, you cannot send an email through Gmail as you will lose your anonymity. One of the main things not to do while using Tor is to use Google services since your ...
user avatar
  • 846
2 votes

Random user agent in Tor Browser

All Tor browsers has standardized user agent which helps to make Tor users to be less distinguishable from each other. By changing your user agent periodically, you are making yourself more unique ...
user avatar
2 votes

If my web browser is fingerprintable (say, odd window size/screen resolution), who gets to see it?

Only to the person answering the request (unless there is a faulty SSL setup at their end, which is very unlikely). There are also ways you can avoid sending "fingerprintable" headers at all, but I ...
user avatar
  • 161
2 votes

Downthemall addon safe

Short answer: Yes, it still uses Tor. Long answer: I have tested this using a completely different method to the one outlined below. I just used DownThemAll! to download the Tor Project test page. ...
user avatar
  • 161
2 votes

How to use a common screen size?

For Windows (the OP does not specify an OS), I've used this shareware utility for years -- can't vouch for it beyond saying I've never had any problems (technical nor malware-related) with it in 5+ ...
user avatar
2 votes

Tails added Ublock Origin is this as bad as it looks?

No. This is no different from the fact that Tails used to ship with AdBlock Plus, it's just a different extension. Yes, it's fingerprintable but they can only tell you're using Tails. No, it doesn'...
user avatar
  • 10.8k
2 votes

Is manually resizing the Tor window dangerous?

Yes, it is harmful for the duration of the window at that size. Specifically, manually resizing it will create a very unique fingerprint for your window size, which will persist until Tor Browser is ...
user avatar
  • 10.8k
2 votes
Accepted

Is there a list of API's that TOR browser blocks

Tor doesn't block APIs (this is virtually impossible and probably not what you want to do), Tor blocks web pages which addresses match a given check on a blacklist or entire types of content like ...
user avatar
  • 290
2 votes

Tor vs Brave - which is technically more effective to hinder user tracking - fingerprint generalization or randomization?

I think you're not going to get a lot of good answers because no one has done a study comparing the two in detail and AFAIK that hasn't been done yet. If we think about it, The Tor Project wants ...
user avatar
  • 2,121
1 vote
Accepted

Canvas fingerprinting: default to never for all websites

"Since it is clear that one does not want canvas fingerprinting..." Actually, it's not. The canvas fingerprinting warning happens when a site tries to read the contents of a <canvas> element. ...
user avatar
  • 10.8k
1 vote

Should I change the timezone of my laptop to UTC?

The Tor daemon doesn't leak timezone, if it did it would split users anonymity sets. Relays shouldn't be able to distinguish sets of users, this would allow them to and would break some of the ...
user avatar
  • 10.8k
1 vote

How to import Tor Browser profile

There are numerous patches applies to FireFox ESR to make Tor Browser, so you cannot make one just with configuration options and extensions.
user avatar
1 vote
Accepted

Are there Tor modifications that do NOT expose uniqueness?

It seems that using a simple appearance add-on will not increase the uniqueness of your browser fingerprint (unless it weirdly modified any of the items below). No, moving those UI items shouldn't ...
user avatar
  • 86
1 vote

Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques

how we can modify Tor browser to hide these footprints and look like a normal firefox user? You cannot, some of Tor Browsers changes are hard coded patches. Trying to undo some of them by ...
user avatar
  • 10.8k
1 vote

Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques

I do not think it is the intention of Tor to be undetectable, rather it is designed to make you indistinguishable from others. According to this post in SO, a browser can be a TBB if it: Has a User-...
user avatar
  • 708
1 vote

Do 'window.innerWidth' and 'window.innerHeight' in CSS pass back the values to the webserver?

Yes, an attacker can easily pass the value to a web server by using the triggered (size-specific) CSS rule to load a remote resource that encodes the size in its URL. You can even make this pretty ...
user avatar
  • 11
1 vote

Is Ubuntu amnesic like Tails?

If you are an expert at internet security and anonymity, you may configure Ubuntu to work for you. But if you are not a security and anonymity expert, use Tails until you get enough expertise and ...
user avatar
  • 3,226
1 vote

Is Ubuntu amnesic like Tails?

Ubuntu is not a privacy-focused distro, quite the opposite. Ubuntu does not wipe the memory. Ubuntu does not prevent fingerprinting. Tails has many great security optimisations, including firewalling,...
user avatar
  • 11

Only top scored, non community-wiki answers of a minimum length are eligible