add new section on anti-fingerprinting

This commit is contained in:
ebanam 2024-05-10 15:04:08 +00:00 committed by Gus
parent ea66bf2b6c
commit b0dfaaae60
10 changed files with 59 additions and 7 deletions

Binary file not shown.

After

Width:  |  Height:  |  Size: 24 KiB

View File

@ -0,0 +1,48 @@
_model: topic
---
title: ANTI-FINGERPRINTING
---
description: How Tor Browser mitigates browser fingerprinting
---
seo_slug: anti-fingerprinting
---
key: 5
---
body:
## Browser fingerprinting
Browser fingerprinting is the systematic collection of information about the web browser to make educated guesses about its identity or characteristics.
Each browser's settings and features create what is called as the "browser fingerprint".
Most browsers inadvertently create a unique fingerprint for each user which can be tracked across the internet.
For more in-depth information on browser fingerprinting refer to [these](https://blog.torproject.org/browser-fingerprinting-introduction-and-challenges-ahead/) [articles](https://blog.torproject.org/tor-browser-advancing-privacy-innovation/) on the Tor Blog.
## What makes browser fingerprinting a threat to online privacy?
First, there is no need to ask for permissions from the user to collect this information.
Any script running in the browser can silently build a fingerprint of the device without users even knowing about it.
Second, if one attribute of the browser fingerprint is unique or if the combination of several attributes is unique, the device can be identified and tracked online.
In that case, no need for a [cookie](https://support.torproject.org/glossary/cookie/) with an ID in it, the fingerprint is enough.
## Tor Browser + Anti-fingerpriting
Tor Browser is specifically engineered to have a identical fingerprint across its users.
No matter what device or operating system the user is on, the browser fingerprint should be the same as any device running Tor Browser.
This means each Tor Browser user looks like many other Tor Browser users, making it difficult to track any individual user.
## Anti-fingerprinting features in Tor Browser
<h3 id="letterboxing">Letterboxing</h3>
Tor Browser in its default mode is starting with a content window rounded to a multiple of 200px x 100px to prevent fingerprinting the screen dimensions.
The strategy here is to put all users in a couple of buckets to make it harder to single them out.
That works so far until users start to resize their windows (e.g. by maximizing them or going into fullscreen mode).
Tor Browser ships with a fingerprinting defense for those scenarios as well, which is called [Letterboxing](https://en.wikipedia.org/wiki/Letterboxing_%28filming%29), a technique developed by Mozilla and [presented in 2019](https://www.zdnet.com/article/firefox-to-add-tor-browser-anti-fingerprinting-technique-called-letterboxing/).
It works by adding white margins to a browser window so that the window is as close as possible to the desired size while users are still in a couple of screen size buckets that prevent singling them out with the help of screen dimensions.
In simple words, this technique makes groups of users of certain screen sizes and this makes it harder to single out users on basis of screen size, as many users will have same screen size.
![letterboxing](/static/images/letterboxing.png)

View File

@ -6,7 +6,7 @@ description: Known Issues
---
seo_slug: known-issues
---
key: 15
key: 17
---
body:

View File

@ -6,7 +6,7 @@ description: How to install Tor Browser onto removable media
---
seo_slug: make-tor-portable
---
key: 16
key: 18
---
body:

View File

@ -6,7 +6,7 @@ description: Learn about Tor for mobile devices
---
seo_slug: mobile-tor
---
key: 15
key: 16
---
body:

View File

@ -6,7 +6,7 @@ description: How Tor Browser handles add-ons, plugins and JavaScript
---
seo_slug: plugins
---
key: 13
key: 14
---
body:
### JAVASCRIPT

View File

@ -6,7 +6,7 @@ description: How to get help, report a bug or give feedback
---
seo_slug: support
---
key: 17
key: 19
---
body:

View File

@ -6,7 +6,7 @@ description: How to remove Tor Browser from your system
---
seo_slug: uninstalling
---
key: 14
key: 15
---
body:
Removing Tor Browser from your system is simple:

View File

@ -6,7 +6,7 @@ description: How to update Tor Browser
---
seo_slug: updating
---
key: 12
key: 13
---
body:
Tor Browser must be kept updated at all times. If you continue to use an outdated version of the software, you may be vulnerable to serious security flaws that compromise your privacy and anonymity.

View File

@ -14,6 +14,10 @@ label = Installation
path = running-tor-browser
label = Running Tor Browser for the First Time
[anti-fingerprinting]
path = anti-fingerprinting
label = Anti-fingerprinting
[circumvention]
path = circumvention
label = Circumvention