[tbb-bugs] #26146 [Applications/Tor Browser]: Setting `general.useragent.override` does not spoof the platform part anymore in ESR 60 which is confusing
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Sep 13 00:16:21 UTC 2018
#26146: Setting `general.useragent.override` does not spoof the platform part
anymore in ESR 60 which is confusing
-------------------------------------------------+-------------------------
Reporter: gk | Owner: tbb-
| team
Type: defect | Status:
| needs_information
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: ff60-esr, tbb-fingerprinting-os, | Actual Points:
tbb-8.0-issues |
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------------------------------+-------------------------
Comment (by traumschule):
We collected two more duplicates today (#27671, #27672). Can somebody bump
the score, please?
From https://arthuredelstein.github.io/tordemos/os-detection-font-
css.html:
> Your likely operating system is: Linux Mac Windows
I'm fine with that.
> Also I'm curious about how you use media streaming to detect the OS.
Me not so much. My focus would be to educate users that all kind of media
can harm their anonymity (#13543) and it's best to use the feature filter
(aka "Safest"). There are better programs to watch videos than your
browser. VLC accepts youtube links and if the terminal is your friend,
youtube-dl and mpsyt make your day. libs to decode mp3 and other media are
prone to all kinds of exploits to take over your browser. no way around
it.
Someone with time could look into
https://github.com/pyllyukko/user.js/issues/316
(i hope this won't fall an my feet later)
I suggest (to myself) not to wait for a decision, but to produce something
that works. I am confident it will earn positive feedback.
- #20842 is the place to go for fonts.
- libm seems unfixable, better keep js turned off (#13018 #15473).
- i propose to disable power management completely (#23627). This will
break things and this is the goal.
- #23701 confuses me
- #27128 seems untouched
Did i forget anything?
I vote for: One UA for all Desktop OS with an option to disclose info for
selected (by the user) apps.
(Knowing that voting doesn't help much).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26146#comment:50>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list