[tor-bugs] #18854 [Applications/Orbot]: Orfox is NOT ANONYMOUS - UserAgent different than other TBB
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Apr 21 09:03:40 UTC 2016
#18854: Orfox is NOT ANONYMOUS - UserAgent different than other TBB
--------------------------------+--------------------------
Reporter: ikurua22 | Owner: n8fr8
Type: defect | Status: assigned
Priority: Very High | Milestone:
Component: Applications/Orbot | Version:
Severity: Normal | Resolution:
Keywords: Orfox | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------+--------------------------
Comment (by cypherpunks):
Replying to [comment:4 ikurua22]:
> > the size of your screen/browser window would fairly clearly indicate
you were on an Android device
>
> If the user enable(default) Javascript, right?
> I turned off JS completely, so how the attacker know I'm using mobile?
CSS, for one thing.
Using the same UA string as Tor Browser would not prevent distinguishing
Orfox, IMO. There are so many more fingerprinting vectors.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18854#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list