5 ms·

As stated in the article, the Tor Browser Bundle seems a good candidate of a widely adopted fingerprint. But it's just Tor of course, not browsers in general.

by dest 10y ago

xkxx 10y ago
Hmm, a good idea would be to make it possible to use Tor Browser without Tor, for those who don't need strong anonymity, but still want to resist browser fingerprinting.
- sleepychu 10y ago
  I really want to just use my browser though, if it's possible to make it work without confessing all the bits that make my fingerprint.
  - dest 10y ago
    I think those bits of information are closely tied to your browser functionalities. E.g. resolution, plugins installed. Keeping those bits for you would degrade your browsing experience. Have a look at the parameters that bring the highest amount of fingerprinting bits in your config https://panopticlick.eff.org/ https://panopticlick.eff.org/ then see if it possible to disable them. I think it's just plain hard.
    - thinkling 10y ago
      It's plain hard because the moment the browser blocks some of the fingerprinting techniques, the fingerprint developers will look for something else and move on. Just like spam and ads, it's an arms race.
- mirimir 10y ago
  That's not very hard.[0] > If you intend to test for leaks using other third-party sites, I recommend using Tor browser, because it's been hardened to block WebGL fingerprinting, and otherwise to report the same fingerprints for all users. But you obviously don't want to use Tor while testing your VPN. First, download Tor browser for your OS. Do that with your VPN connected, so your ISP doesn't see. After extracting, start Tor browser. You can probably accept all defaults. Go to advanced network settings, and select "No proxy". Browse about:config, and toggle both "extensions.torlauncher.starttor" and "network.proxy.socksremote_dns" to "false". Then browse check.torproject.org. You should see "Sorry. You are not using Tor." and your VPN exit IP address. 0) https://www.ivpn.net/privacy-guides/how-to-perform-a-vpn-leak-test https://www.ivpn.net/privacy-guides/how-to-perform-a-vpn-lea...
  - xkxx 10y ago
    Nice. I didn't know it was that easy. Using Tor Browser + VPN is definitely a good idea. Especially, if you don't want to be constantly solving captchas because of those hosts who don't trust Tor exit nodes. Some hosts even ban all Tor exit nodes altogether, duh.

As stated in the article, the Tor Browser Bundle seems a good candidate of a widely adopted fingerprint. But it's just Tor of course, not browsers in general.

by dest 10y ago

As stated in the article, the Tor Browser Bundle seems a good candidate of a widely adopted fingerprint. But it's just Tor of course, not browsers in general.

xkxx 10y ago

Hmm, a good idea would be to make it possible to use Tor Browser without Tor, for those who don't need strong anonymity, but still want to resist browser fingerprinting.

sleepychu 10y ago
I really want to just use my browser though, if it's possible to make it work without confessing all the bits that make my fingerprint.
- dest 10y ago
  I think those bits of information are closely tied to your browser functionalities. E.g. resolution, plugins installed. Keeping those bits for you would degrade your browsing experience. Have a look at the parameters that bring the highest amount of fingerprinting bits in your config https://panopticlick.eff.org/ https://panopticlick.eff.org/ then see if it possible to disable them. I think it's just plain hard.
  - thinkling 10y ago
    It's plain hard because the moment the browser blocks some of the fingerprinting techniques, the fingerprint developers will look for something else and move on. Just like spam and ads, it's an arms race.
mirimir 10y ago
That's not very hard.[0] > If you intend to test for leaks using other third-party sites, I recommend using Tor browser, because it's been hardened to block WebGL fingerprinting, and otherwise to report the same fingerprints for all users. But you obviously don't want to use Tor while testing your VPN. First, download Tor browser for your OS. Do that with your VPN connected, so your ISP doesn't see. After extracting, start Tor browser. You can probably accept all defaults. Go to advanced network settings, and select "No proxy". Browse about:config, and toggle both "extensions.torlauncher.starttor" and "network.proxy.socksremote_dns" to "false". Then browse check.torproject.org. You should see "Sorry. You are not using Tor." and your VPN exit IP address. 0) https://www.ivpn.net/privacy-guides/how-to-perform-a-vpn-leak-test https://www.ivpn.net/privacy-guides/how-to-perform-a-vpn-lea...
- xkxx 10y ago
  Nice. I didn't know it was that easy. Using Tor Browser + VPN is definitely a good idea. Especially, if you don't want to be constantly solving captchas because of those hosts who don't trust Tor exit nodes. Some hosts even ban all Tor exit nodes altogether, duh.