4 ms·

> I have a longish and probably out of date list of settings that I like to chance in a new instance of firefox Not a user but part of the purpose of the TOR f

by tomxor 4y ago

> I have a longish and probably out of date list of settings that I like to chance in a new instance of firefox Not a user but part of the purpose of the TOR fork is settings, anything that is detectable via JS is supposed to remain default to prevent fingerprinting. It's partly why it's not widely popular, I don't know if this is still true but it used to be that it was supposed to be run at a specific viewport resolution regardless of your device. All in the name of making your fingerprint as close to the same as all other TOR browser users.

encryptluks2 4y ago
[dead]
dathinab 4y ago
> run at a specific viewport resolution regardless of your device. It's more like pretending to the website that your screen has a "common" resolution etc. which is nearly but not quite the same as what you said. In the past they semi required you to keep your tor window in a specific window size for this, which just didn't work well in practice. By now they better integrated that in the browser from what I heard, so you can resize it however you want but websites might have an "empty" border are to the left/right/bottom depending on you screen resolution, windows size etc. from what I have heard. With a typical maximized window on 1080p you won't really notice it, on 4k you might notice that it's just "dump" up scaled from 1080p, but the person I spoke with wasn't sure if maybe they have a set of supported common resolutions instead of just one. And on a 4:3 screen he said it's quite noticeable.
- alkonaut 4y ago
  Not sure how it's designed but if I was designing a system of reducing detectable entropy from viewport size, I'd make a fixed list of available resolutions. First all the common resolutions (1920x1080, 2550x14540 and so on), and in addition to that maybe just "snapped" grid sizes in 64p pixel increments. If you use a window size that doesn't match, it should just render the viewport to the closest smaller allowed size, and fill the border with something (e.g. the background color of the page). Perhaps that's exactly how it works?
  - medstrom 4y ago
    Yes, that's how it works, if you're talking about the setting privacy.resistFingerprinting.letterboxing. To my memory, the list is any multiple of 200 on width and any multiple of 100 on height. So at this moment my viewport is, I believe, exactly 1200x900. Bear in mind that it's a minority of people that hit F11 to browse fullscreen, they still have toolbars, so it's not as common as you'd think for the viewport to match a common screen resolution like 1920x1080.
    - alkonaut 4y ago
      Yeah the ones you want I guess would be 1920x1200 with the height reduced by common (say Windows 10/11) taskbar and tooobars. It's never going to be perfect but you'd at least want to minimize letterboxing for the most common fullscreen setups on the most common platform(s). But you could throw in 1920x1200 full screen as well for good measure. Perhaps it would be better to letterbox randomly with say 20px width and 20px height, so it's just 1 chance in 400 to even return to the same reported screen size? That way you'd be even harder to track than if you are the only person running exactly 1000x800.

by tomxor 4y ago

encryptluks2 4y ago

[dead]

dathinab 4y ago

> run at a specific viewport resolution regardless of your device. It's more like pretending to the website that your screen has a "common" resolution etc. which is nearly but not quite the same as what you said. In the past they semi required you to keep your tor window in a specific window size for this, which just didn't work well in practice. By now they better integrated that in the browser from what I heard, so you can resize it however you want but websites might have an "empty" border are to the left/right/bottom depending on you screen resolution, windows size etc. from what I have heard. With a typical maximized window on 1080p you won't really notice it, on 4k you might notice that it's just "dump" up scaled from 1080p, but the person I spoke with wasn't sure if maybe they have a set of supported common resolutions instead of just one. And on a 4:3 screen he said it's quite noticeable.

alkonaut 4y ago
Not sure how it's designed but if I was designing a system of reducing detectable entropy from viewport size, I'd make a fixed list of available resolutions. First all the common resolutions (1920x1080, 2550x14540 and so on), and in addition to that maybe just "snapped" grid sizes in 64p pixel increments. If you use a window size that doesn't match, it should just render the viewport to the closest smaller allowed size, and fill the border with something (e.g. the background color of the page). Perhaps that's exactly how it works?
- medstrom 4y ago
  Yes, that's how it works, if you're talking about the setting privacy.resistFingerprinting.letterboxing. To my memory, the list is any multiple of 200 on width and any multiple of 100 on height. So at this moment my viewport is, I believe, exactly 1200x900. Bear in mind that it's a minority of people that hit F11 to browse fullscreen, they still have toolbars, so it's not as common as you'd think for the viewport to match a common screen resolution like 1920x1080.
  - alkonaut 4y ago
    Yeah the ones you want I guess would be 1920x1200 with the height reduced by common (say Windows 10/11) taskbar and tooobars. It's never going to be perfect but you'd at least want to minimize letterboxing for the most common fullscreen setups on the most common platform(s). But you could throw in 1920x1200 full screen as well for good measure. Perhaps it would be better to letterbox randomly with say 20px width and 20px height, so it's just 1 chance in 400 to even return to the same reported screen size? That way you'd be even harder to track than if you are the only person running exactly 1000x800.