Re: [tor-bugs] #18854 [Applications/Orbot]: Orfox is NOT ANONYMOUS - UserAgent different than other TBB

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#18854: Orfox is NOT ANONYMOUS - UserAgent different than other TBB
--------------------------------+--------------------------
 Reporter:  ikurua22            |          Owner:  n8fr8
     Type:  defect              |         Status:  assigned
 Priority:  Very High           |      Milestone:
Component:  Applications/Orbot  |        Version:
 Severity:  Normal              |     Resolution:
 Keywords:  Orfox               |  Actual Points:
Parent ID:                      |         Points:
 Reviewer:                      |        Sponsor:
--------------------------------+--------------------------

Comment (by cypherpunks):

 Replying to [comment:4 ikurua22]:
 > > the size of your screen/browser window would fairly clearly indicate
 you were on an Android device
 >
 > If the user enable(default) Javascript, right?
 > I turned off JS completely, so how the attacker know I'm using mobile?
 CSS, for one thing.

 Using the same UA string as Tor Browser would not prevent distinguishing
 Orfox, IMO. There are so many more fingerprinting vectors.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18854#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs