[tor-bugs] #31222 [Circumvention/Snowflake]: Remove/or Improve Tor Browser detection in snowflake.js
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Jul 23 11:12:25 UTC 2019
#31222: Remove/or Improve Tor Browser detection in snowflake.js
-------------------------+-----------------------------------------
Reporter: cypherpunks | Owner: (none)
Type: defect | Status: new
Priority: Medium | Component: Circumvention/Snowflake
Version: | Severity: Normal
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------+-----------------------------------------
Right now the code seems to be outdated,
{{{
Util.TBB_UAS = [
'Mozilla/5.0 (Windows NT 6.1; rv:10.0) Gecko/20100101 Firefox/10.0',
'Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20100101 Firefox/17.0',
'Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0',
'Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0'
];
}}}
Nowadays people enabling RFP in Firefox will get the same UA as TB, so
using the UA alone is not sufficient. I suggest either removing this
(snowflake won't work either way, it's better to just say that WebRTC is
disabled) or improving it with some other heuristic for detecting TB.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31222>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list