[tor-bugs] #18854 [Applications/Orbot]: Orfox is NOT ANONYMOUS - UserAgent different than other TBB

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Apr 21 09:03:40 UTC 2016


#18854: Orfox is NOT ANONYMOUS - UserAgent different than other TBB
--------------------------------+--------------------------
 Reporter:  ikurua22            |          Owner:  n8fr8
     Type:  defect              |         Status:  assigned
 Priority:  Very High           |      Milestone:
Component:  Applications/Orbot  |        Version:
 Severity:  Normal              |     Resolution:
 Keywords:  Orfox               |  Actual Points:
Parent ID:                      |         Points:
 Reviewer:                      |        Sponsor:
--------------------------------+--------------------------

Comment (by cypherpunks):

 Replying to [comment:4 ikurua22]:
 > > the size of your screen/browser window would fairly clearly indicate
 you were on an Android device
 >
 > If the user enable(default) Javascript, right?
 > I turned off JS completely, so how the attacker know I'm using mobile?
 CSS, for one thing.

 Using the same UA string as Tor Browser would not prevent distinguishing
 Orfox, IMO. There are so many more fingerprinting vectors.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18854#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list