[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #26146 [Applications/Tor Browser]: Setting `general.useragent.override` does not spoof the platform part anymore in ESR 60 which is confusing

#26146: Setting `general.useragent.override` does not spoof the platform part
anymore in ESR 60 which is confusing
---------------------------------------------+--------------------------
 Reporter:  gk                               |          Owner:  tbb-team
     Type:  defect                           |         Status:  new
 Priority:  Medium                           |      Milestone:
Component:  Applications/Tor Browser         |        Version:
 Severity:  Normal                           |     Resolution:
 Keywords:  ff60-esr, tbb-fingerprinting-os  |  Actual Points:
Parent ID:                                   |         Points:
 Reviewer:                                   |        Sponsor:
---------------------------------------------+--------------------------

Comment (by temp123):

 Replying to [comment:23 gk]:
 > The slider is for adjusting the *security* against *browser
 exploitation*.

 https://tb-manual.torproject.org/en-US/security-slider.html

 > Tor Browser includes a “Security Slider” that lets you increase your
 security by disabling certain web features that can be used to attack your
 security **and anonymity**.

 It would make sense to leave general.useragent.override as is and set
 privacy.resistFingerprinting to false when the security slider is moved to
 "Safest".

 Reasoning:
 - A user-agent which differs from general.useragent.override is an
 anonymity issue
 - Javascript is disabled when security slider is moved to "Safest"
 - privacy.resistFingerprinting deals with privacy issues which are
 relevant only when javascript is enabled

 This would give those who want to trade a bit of anonymity and security
 for a better browsing experience the option while not affecting those who
 want the highest/safest level of anonymity security.

 Also, this would not silently change the user-agent on update of those who
 have already moved the slider to "Safest", which is what prompted my
 previous ticket. https://trac.torproject.org/projects/tor/ticket/27495

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26146#comment:25>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs