[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Fingerprinting issue in Tor Browser for macOS

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] Fingerprinting issue in Tor Browser for macOS
From: Matthew Finkel <matthew.finkel@xxxxxxxxx>
Date: Mon, 30 Apr 2018 21:57:45 +0000
Delivered-to: archiver@xxxxxxxx
Delivery-date: Mon, 30 Apr 2018 17:58:11 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:date:to:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=nl8fnRWmfiOlMBPXjM7RBcMeJ+2ePdSa8VPqP/Wnp6U=; b=nmHZuPsE5wfxwzJM8kZTYoy4bN4VrPgZBr+kWJovKa0O/cG+ymT04YLDENAaOaucjS NM7CYoI+8qpjSHX1caxqpIdHXQLSuYEdymiTJ/qntfT6dSwks3Aeabn3h/laMV31v/Cz Ipdh78mr8P78CSzc53E9FSDcuIaHHNzTA9oIUUrqdE6j5PoCEY6KpyvdbXeXW+r9cvxg R3PMcYWh4mYxJzbvqxCJq2VzIHyCtTaC4YdQg5vLEb6WFr+2jREpHihNokF6PDgkArK2 bvHyYaLBEsvp5CaWsN1IeZeAh7wEoiqkgV3ORylDyDWv4+9eoASwYVLJzuWgiAxDtWA1 RHVg==
In-reply-to: <7c725378-15ce-3ed4-d90f-bea7c6bff172@lunorian.is>
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <7c725378-15ce-3ed4-d90f-bea7c6bff172@lunorian.is>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: NeoMutt/20170113 (1.7.2)

On Mon, Apr 30, 2018 at 04:26:00AM +0000, Nathaniel Suchy (Lunorian) wrote:
> When using Tor Browser for macOS, the EFF's tool panoptclick shows that
> a large amount of fonts are available, while Tor Browser for Linux
> claims only Wingdings is available. This could allow a website know
> whether a Tor User is using Linux or not helping to create a unique
> fingerprint. Thoughts?

Yes, sadly this is the current state. The three supported platforms for
Tor Browser are distinguishable by looking at a user's available fonts.
This is current a compromise between fingerprintability and usability.
Please see the Tor Browser Design document for additional details [0].
However, note this isn't the only method for identifying the underlying
platform.

[0]
Section 4.6, Subsection "Specific Fingerprinting Defenses in the Tor
Browser", Item 6. Fonts
https://www.torproject.org/projects/torbrowser/design/#fingerprinting-linkability
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

References:
- [tor-talk] Fingerprinting issue in Tor Browser for macOS
  - From: Nathaniel Suchy (Lunorian)

Prev by Author: Re: [tor-talk] How do the OBFS4 "built-in" Bridges work?
Next by Author: Re: [tor-talk] How do the OBFS4 "built-in" Bridges work?
Previous by thread: [tor-talk] Fingerprinting issue in Tor Browser for macOS
Index(es):
- Author
- Thread