[tor-dev] Tor Project Idea | GSOC 2015 | Panopticlick | fake fingerprint

[Rohit Dua]

Do you think this project idea(or related) can be turned into gsoc-2015
project?


On Thu, Feb 12, 2015 at 10:16 AM, Andrew F <andrewfriedman101 at gmail.com>
wrote:

> I think I like this idea.. Well done.
>
>
> On Wednesday, February 11, 2015, Rohit Dua <8ohit.dua at gmail.com> wrote:
>
>> Hello
>>
>> I'm Rohit from India, aspiring for gsoc-2015(TOR). This will be my 2nd
>> consecutive year for gsoc participation. Previous mediawiki. Project:BUB
>> tool <http://tools.wmflabs.org/bub/>
>>
>> I stumbled across Panopticlick related project
>> <https://www.torproject.org/getinvolved/volunteer.html.en#Panopticlick>
>> in tor project ideas. I would like to propose a project relating to this.
>> Panopticlick obtains browser fingerprints mainly via javascript
>> objects(navigator, screen, window etc.)  These objects are easy to fake in
>> webkit browsers, without touching the underlying source code of browsers,
>> eg.  using *__defineGetter__() *after every* javascriptObjectCleared.*
>> If we could compile a large dataset of possible values of js object for
>> several popular browsers, we could use that to randomize the fingerprint
>> for each network request.
>> The dataset could also contain random http header values etc.
>>
>> I am building a python library that does somewhat similar.
>> https://github.com/rohit-dua/selkie (*in development*) It uses pyqt for
>> headless browsing/scraping of webpages. It is a python library that mimics
>> different browser fingerprints by faking(randomizing) the values of
>> navigator, screen object, headers etc. I also intend to add biometric
>> library that mimics humans mouse movements/ keypress statistics for
>> clicking links and surfing pages.
>>
>> I propose to build a similar headless bot that mimics several browsers
>> fingerprints and could be used for anonymous scraping of data and/or adding
>> a feature of random fingerprint in awesome tor tools. Also to improve
>> anonymity location based datasets could be provided(*supported in the
>> above library*) as extra/feature.(maybe downloaded from statcounter.com)
>>
>> Thanks
>> Rohit Dua
>> IRC:rohit-dua
>> github: rohit-dua <https://github.com/rohit-dua/>
>> (8ohit.dua at gmail.com)
>>
>>
>>
>>
>>
> _______________________________________________
> tor-dev mailing list
> tor-dev at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20150212/56aee2b0/attachment.html>