Re: [tor-talk] "You are using Tor, but your browser profile differs from the recommended, `Tor Browser Bundle` default profile."

[James Brown <jbrownfirst@xxxxxxxxx>]

On 11.11.2011 11:11, Georg Koppen wrote:
>> I try the test "http://ip-check.info"; mentioned in that document:
>> "https://www.torproject.org/projects/torbrowser/design/";, and have the
>> above result.
>> I remove my directory tor-browser_ru from my $HOME and unpuck the TBB
>> tarboll for using it with default settings and have the same result.
>> I use TBB from the tarboll
>> "tor-browser-gnu-linux-x86_64-2.2.34-1-dev-ru.tar.gz', us I know that it
>> is latest version.
>> Furtherinmore, I found that the parameter "Signature" in that fest give
>> me the same result in each TBB's starting under the same machine but
>> each under different UNIX-users. (And that test indicate that the value
>> of that parameter is not default value).
>> So, that it is a hole in TBB? Or I do something wrong? But what I can do
>> wrong if I simply unpack tarball and strat TBB?
> 
> You are doing nothing wrong. We just have not had the time yet to adapt
> our test to all TBB settings. Sorry, if that did confuse you. We try to
> fix this as soon as possible.

Very thanks for those information. But what about "signature"? What
means that parameter and how does it computes?
As I suppose it is a hash of some data which browser send to server, and
it must be the same on each TBB in the World, am I right?
In the American version of the TBB it the same as in Russian but your
test indicate that in Russian version is wrong and that in in American
version is rights.
If I am right and that hash must be the same on each TBB, could you
right its right value? (I don't want to write my value here by the
security purposes).
> 
>> P.S. The test defines my browser window (in spite of JS disabled) and
>> advices to use another; is it possible to change it without changing
>> hardware?
> 
> The test gets the values purely with CSS and disabling that is hardly an
> option. There is currently no way to avoid that other than patching the
> Firefox source. It is already on Mike's ever-growing ToDo list. See:
> https://trac.torproject.org/projects/tor/ticket/2875
> 
> 
> Georg
> 
> 
> 
> Thanks for information, Georg.


P.S. But as I can see from http://ip-check.info and from
http://http://torcheck.xenobite.eu/ it detects from my Russian version
TBB the next:
LANGUAGE: en-us,en;q=0.5
ENCODING: gzip, deflate
CHARSET: windows-1251,utf-8;q=0.7,*;q=0.7
and from American version:
LANGUAGE: en-us,en;q=0.5
ENCODING: gzip, deflate
CHARSET: ISO-8859-1,utf-8;q=0.7,*;q=0.7
It seems as a bug in the TBB becuase in spite of indicating of "en-us"
language it indicates Russian charset in Russian version of TBB.
Probably, I take place in other non-American-Engilsih versions of TBB.
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk