Advanced Tor Browser Fingerprinting • Hacker News Board

Re: Advanced Tor Browser Fingerprinting

#31

Post by nannal » Mon, Mar 07, 2016, 11:27 AM UTC

dang wrote: post #6

chatmasta wrote: post #4

Earlier quoted context omitted.

I'm sure at least one developer of the Tor project reads hacker news. EDIT: Far more interesting is the author's most recent article.... wtf http://jcarlosnorte.com/security/2016/03/06/hacking-tachogra...

That one should probably have its own thread.

It does now.

Re: Advanced Tor Browser Fingerprinting

#32

Post by bugmen0t » Mon, Mar 07, 2016, 11:43 AM UTC

The author is missing the point of the Tor Browser. They don't try to make fingerprinting impossible. They want to make the outcome uniform across all users. See "Strategies for Defense: Randomization versus Uniformity" in their design docs [1].

And (as other said) uniformity is increased when using an anonymous/privacy enhancing operating system like Tails or WHONIX underneath.

[1] https://www.torproject.org/projects/torbrowser/design/#finge...

Re: Advanced Tor Browser Fingerprinting

#33

Post by [deleted] » Mon, Mar 07, 2016, 11:52 AM UTC

[deleted]

Re: Advanced Tor Browser Fingerprinting

#34

Post by gavazzy » Mon, Mar 07, 2016, 2:19 PM UTC

Disable javascript. Disable user-agent. Run from VM.