[tor-bugs] #31222 [Circumvention/Snowflake]: Remove/or Improve Tor Browser detection in snowflake.js

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Jul 23 11:12:25 UTC 2019


#31222: Remove/or Improve Tor Browser detection in snowflake.js
-------------------------+-----------------------------------------
 Reporter:  cypherpunks  |          Owner:  (none)
     Type:  defect       |         Status:  new
 Priority:  Medium       |      Component:  Circumvention/Snowflake
  Version:               |       Severity:  Normal
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+-----------------------------------------
 Right now the code seems to be outdated,

 {{{
 Util.TBB_UAS = [
   'Mozilla/5.0 (Windows NT 6.1; rv:10.0) Gecko/20100101 Firefox/10.0',
   'Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20100101 Firefox/17.0',
   'Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0',
   'Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0'
 ];
 }}}

 Nowadays people enabling RFP in Firefox will get the same UA as TB, so
 using the UA alone is not sufficient. I suggest either removing this
 (snowflake won't work either way, it's better to just say that WebRTC is
 disabled) or improving it with some other heuristic for detecting TB.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31222>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list