Opened 12 years ago

#761 closed enhancement (Implemented)

Let Torbutton Spoof the specific OS and FF build.

Reported by: SCH5 Owned by:
Priority: Low Milestone:
Component: Applications/Torbutton Version: 1.1
Severity: Keywords:
Cc: SCH5 Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

When testing the latest Torbutton development version on this website : http://www.cyscape.com/showbrow.aspx?bhjs=0, the original platform "OS" used was revealed, thus reducing anonymity. It would be nice if Torbutton could spoof the clients OS randomly, making it harder for exit notes or websites to take the first step in determining your identity. This could also be standardized as a single "spoofed OS". (as was done with v1.1.14 24 Feb 2008 "spoof an English browser").

The specific Firefox build number was also revealed in the same manner. This in combination with the identification of ones OS, makes it more likely that a pattern could be seen. Especially when someone uses a less common OS. To counter this problem, Torbutton could randomly spoof all the FF version numbers between the first and last build. For instance for FF2, anything between 2.xx and 2.xx.14 and for FF3 in the same way. Or again using one specific build number for all.

[Automatically added by flyspray2trac: Operating System: All]

Child Tickets

Change History (4)

comment:1 Changed 12 years ago by SCH5

To the ADMIN:

Please correct the lines and remove my above comment?

comment:2 Changed 12 years ago by mikeperry

I think you are confused. This option is already implemented. I visited this page, and it reports my Firefox version
as 2.0.0.14, my platform as WinXP, and my builddate as 20080404. These are all Torbutton spoofed values.

Note that Torbutton's spoofing also extends to the "Help->About Firefox" window. Perhaps you just got confused because
the spoofed build date is there?

What OS are you using and what did it actually report?

comment:3 Changed 12 years ago by SCH5

When I tested it, my OS and FF build exactly matched what was momentarily displayed on that site. So I thought it was not spoofed. Now I use a different Firefox build and now it displays the previous build I used. Nice to see it was already implemented. Although I don't know when : https://torbutton.torproject.org/dev/CHANGELOG ?

comment:4 Changed 12 years ago by mikeperry

flyspray2trac: bug closed.
This was done in 1.1.x.

Note: See TracTickets for help on using tickets.