[tor-talk] Fwd: [guardian-dev] first beta release Orfox!
Alexis Wattel
alexiswattel at gmail.com
Mon Sep 28 14:44:40 UTC 2015
The User-Agent and Accept headers gave me a unique fingerprint on https://panopticlick.eff org/.
They should be set to the same as the Tor Browser. There's no point in identifying the client as a mobile user if you seek anonymity; and the User-Agent is the one most basic way to track browsers besides IP addresses.
The Accept headers are plain and simple leaked from the device.
Could easily pass as a honest mistake if this issue had not already been reported 2 years ago about Orweb.
More information about the tor-talk
mailing list