mirror of
https://github.com/torproject/manual.git
synced 2025-02-20 01:20:31 +00:00
add new section on anti-fingerprinting
This commit is contained in:
parent
ea66bf2b6c
commit
b0dfaaae60
BIN
assets/static/images/letterboxing.png
Normal file
BIN
assets/static/images/letterboxing.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 24 KiB |
48
content/anti-fingerprinting/contents.lr
Normal file
48
content/anti-fingerprinting/contents.lr
Normal file
@ -0,0 +1,48 @@
|
||||
_model: topic
|
||||
---
|
||||
title: ANTI-FINGERPRINTING
|
||||
---
|
||||
description: How Tor Browser mitigates browser fingerprinting
|
||||
---
|
||||
seo_slug: anti-fingerprinting
|
||||
---
|
||||
key: 5
|
||||
---
|
||||
body:
|
||||
|
||||
## Browser fingerprinting
|
||||
|
||||
Browser fingerprinting is the systematic collection of information about the web browser to make educated guesses about its identity or characteristics.
|
||||
Each browser's settings and features create what is called as the "browser fingerprint".
|
||||
Most browsers inadvertently create a unique fingerprint for each user which can be tracked across the internet.
|
||||
For more in-depth information on browser fingerprinting refer to [these](https://blog.torproject.org/browser-fingerprinting-introduction-and-challenges-ahead/) [articles](https://blog.torproject.org/tor-browser-advancing-privacy-innovation/) on the Tor Blog.
|
||||
|
||||
## What makes browser fingerprinting a threat to online privacy?
|
||||
|
||||
First, there is no need to ask for permissions from the user to collect this information.
|
||||
Any script running in the browser can silently build a fingerprint of the device without users even knowing about it.
|
||||
Second, if one attribute of the browser fingerprint is unique or if the combination of several attributes is unique, the device can be identified and tracked online.
|
||||
In that case, no need for a [cookie](https://support.torproject.org/glossary/cookie/) with an ID in it, the fingerprint is enough.
|
||||
|
||||
## Tor Browser + Anti-fingerpriting
|
||||
|
||||
Tor Browser is specifically engineered to have a identical fingerprint across its users.
|
||||
No matter what device or operating system the user is on, the browser fingerprint should be the same as any device running Tor Browser.
|
||||
This means each Tor Browser user looks like many other Tor Browser users, making it difficult to track any individual user.
|
||||
|
||||
## Anti-fingerprinting features in Tor Browser
|
||||
|
||||
<h3 id="letterboxing">Letterboxing</h3>
|
||||
|
||||
Tor Browser in its default mode is starting with a content window rounded to a multiple of 200px x 100px to prevent fingerprinting the screen dimensions.
|
||||
The strategy here is to put all users in a couple of buckets to make it harder to single them out.
|
||||
That works so far until users start to resize their windows (e.g. by maximizing them or going into fullscreen mode).
|
||||
Tor Browser ships with a fingerprinting defense for those scenarios as well, which is called [Letterboxing](https://en.wikipedia.org/wiki/Letterboxing_%28filming%29), a technique developed by Mozilla and [presented in 2019](https://www.zdnet.com/article/firefox-to-add-tor-browser-anti-fingerprinting-technique-called-letterboxing/).
|
||||
It works by adding white margins to a browser window so that the window is as close as possible to the desired size while users are still in a couple of screen size buckets that prevent singling them out with the help of screen dimensions.
|
||||
|
||||
In simple words, this technique makes groups of users of certain screen sizes and this makes it harder to single out users on basis of screen size, as many users will have same screen size.
|
||||
|
||||
![letterboxing](/static/images/letterboxing.png)
|
||||
|
||||
|
||||
|
@ -6,7 +6,7 @@ description: Known Issues
|
||||
---
|
||||
seo_slug: known-issues
|
||||
---
|
||||
key: 15
|
||||
key: 17
|
||||
---
|
||||
body:
|
||||
|
||||
|
@ -6,7 +6,7 @@ description: How to install Tor Browser onto removable media
|
||||
---
|
||||
seo_slug: make-tor-portable
|
||||
---
|
||||
key: 16
|
||||
key: 18
|
||||
---
|
||||
body:
|
||||
|
||||
|
@ -6,7 +6,7 @@ description: Learn about Tor for mobile devices
|
||||
---
|
||||
seo_slug: mobile-tor
|
||||
---
|
||||
key: 15
|
||||
key: 16
|
||||
---
|
||||
body:
|
||||
|
||||
|
@ -6,7 +6,7 @@ description: How Tor Browser handles add-ons, plugins and JavaScript
|
||||
---
|
||||
seo_slug: plugins
|
||||
---
|
||||
key: 13
|
||||
key: 14
|
||||
---
|
||||
body:
|
||||
### JAVASCRIPT
|
||||
|
@ -6,7 +6,7 @@ description: How to get help, report a bug or give feedback
|
||||
---
|
||||
seo_slug: support
|
||||
---
|
||||
key: 17
|
||||
key: 19
|
||||
---
|
||||
body:
|
||||
|
||||
|
@ -6,7 +6,7 @@ description: How to remove Tor Browser from your system
|
||||
---
|
||||
seo_slug: uninstalling
|
||||
---
|
||||
key: 14
|
||||
key: 15
|
||||
---
|
||||
body:
|
||||
Removing Tor Browser from your system is simple:
|
||||
|
@ -6,7 +6,7 @@ description: How to update Tor Browser
|
||||
---
|
||||
seo_slug: updating
|
||||
---
|
||||
key: 12
|
||||
key: 13
|
||||
---
|
||||
body:
|
||||
Tor Browser must be kept updated at all times. If you continue to use an outdated version of the software, you may be vulnerable to serious security flaws that compromise your privacy and anonymity.
|
||||
|
@ -14,6 +14,10 @@ label = Installation
|
||||
path = running-tor-browser
|
||||
label = Running Tor Browser for the First Time
|
||||
|
||||
[anti-fingerprinting]
|
||||
path = anti-fingerprinting
|
||||
label = Anti-fingerprinting
|
||||
|
||||
[circumvention]
|
||||
path = circumvention
|
||||
label = Circumvention
|
||||
|
Loading…
x
Reference in New Issue
Block a user