[tor-bugs] #31512 [Applications/Tor Browser]: Fingerprinting of Tor Browser

[Tor Bug Tracker & Wiki]

#31512: Fingerprinting of Tor Browser
--------------------------------------+--------------------------
 Reporter:  thelamper                 |          Owner:  tbb-team
     Type:  enhancement               |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:  invalid
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by Thorin):

 https://thorin-oakenpants.github.io/testing/debugtriop.html

 The fingerprints differ per OS due to a few navigator properties (which we
 did deliberately). That's all. The above link breaks down both FP's

 The ChkTorButton function no longer works for two reasons:
 - the resource being checked no longer exists
 - Synchronous XMLHttpRequest on the main thread is deprecated anyway

 All the rest  on the original PoC is based on the fingerprint, which
 includes the ChkTorButton value: and this is broken now: returning a
 `NetworkError`. Even if it wasn't broken, the fingerprints don't leak
 anything except OS: which ... see previous post

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31512#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online