[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Fwd: [guardian-dev] first beta release Orfox!

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] Fwd: [guardian-dev] first beta release Orfox!
From: Alexis Wattel <alexiswattel@xxxxxxxxx>
Date: Mon, 28 Sep 2015 14:44:40 +0000
Delivered-to: archiver@xxxxxxxx
Delivery-date: Mon, 28 Sep 2015 10:44:55 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=in-reply-to:references:mime-version:content-transfer-encoding :content-type:subject:from:date:to:cc:message-id; bh=kOP3neUBt7OzKoyviR6E63dXjLBEVpzHEEyDgzIUvas=; b=BRbEiFPJMt7na8CQTXdnW3hxZhhz4Ux+6amVUY9CtkvBv2mjt36AC6kN4J9dgJlx5d CXqbmOXS7tIyja7zhtCw4A6dEnx12dUpc2UczUdRB3UxheOFnOjON/Gi+Q2K2s8gv5z4 DVGcRPW+FZTrATtn3vi5YEiSwwxAtrB1WvKf09aYnXCXgakuk/O/rN8lGc/flY4E9/X+ d6QGsMLOV1wExXvZC9MEXo46f/1UPDpLfmoBZ6f3yu/vUoBiO+G04qEz/dkYpAH6i/HO A0JklKVZF8HRVB5RrnKnGa/L/RthDCdmOk5EpsRoiwNp2szzWVuJk0zyKHP0UdBLRo0K 6j3g==
In-reply-to: <1443133988.1502007.392950337.3AF864EB@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <1443133988.1502007.392950337.3AF864EB@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>

The User-Agent and Accept headers gave me a unique fingerprint on https://panopticlick.eff org/. 

They should be set to the same as the Tor Browser. There's no point in identifying the client as a mobile user if you seek anonymity; and the User-Agent is the one most basic way to track browsers besides IP addresses. 

The Accept headers are plain and simple leaked from the device. 

Could easily pass as a honest mistake if this issue had not already been reported 2 years ago about Orweb. 
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] Fwd: [guardian-dev] first beta release Orfox!
  - From: Nathan Freitas

References:
- [tor-talk] Fwd: [guardian-dev] first beta release Orfox!
  - From: Nathan Freitas

Prev by Author: Re: [tor-talk] Is TOR still secure?
Next by Author: [tor-talk] New mailing list: tor-teachers
Previous by thread: [tor-talk] Fwd: [guardian-dev] first beta release Orfox!
Next by thread: Re: [tor-talk] Fwd: [guardian-dev] first beta release Orfox!
Index(es):
- Author
- Thread