Re: [tor-talk] Tor browser can be fingerprinted

[harmony <harmony01@xxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Mike Perry:
> harmony:
>> Mike Perry:
>>> 
>>> So this means that if you resize your browser, you also get a 
>>> totally different display fingerprint. However, if you resize
>>> it to something weird, and continue to use that weird size for
>>> a while, all of that activity is highly linkable to advertisers
>>> until you resize again.
>>> 
>> 
>> Equally, 'if you maximize your browser (or your browser
>> maximizes itself automatically, as Tor Browser does when I click
>> 'New Identity), and your screen is some weird size, all of your
>> activity is highly linkable to advertisers until you get a new
>> screen'?
> 
> Your Tor Browser should *not* be maximizing itself during New
> Identity. It should be setting its content window to a 200x100
> multiple.
> 
> I've never seen one maximize for that step. Does that always happen
> for you? Sounds like a bug caused by something about your setup.
> Does it happen with a fresh bundle in a new directory? Do you mind
> sharing your monitor resolution?
> 

I just deleted the existing directory and re-downloaded the bundle
(3.0alpha3 on Ubuntu 13.04). My monitor resolution is apparently
1024x600 (I hope that's the one you meant).

On first opening the program, the window is maximized. If I
un-maximize it to a random-ish size, browse around for a bit, and then
request a new identity, the new browser window opens maximized.

EFF's 'Panopticlick' and JonDoNym's 'ip-check.org' both claim
different sizes for my screen. I'm not sure what that means - let me
know if there's something I'm not telling you.
-----BEGIN PGP SIGNATURE-----
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=1ebe
-----END PGP SIGNATURE-----
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsusbscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk