logoalt Hacker News

rendxyesterday at 4:30 AM2 repliesview on HN

> to have every tor browser always generate a random fingerprint

Browsers do not "generate" fingerprints. They expose data that can be used to fingerprint users. You cannot "randomize" this; even if you were to return random values for, say, user screen size, with various visual side effects, it would just be another signal to fingerprint: "Oh, your browser is returning random values? Must be a Tor browser user".


Replies

autoexecyesterday at 3:57 PM

> it would just be another signal to fingerprint: "Oh, your browser is returning random values? Must be a Tor browser user".

That's perfectly fine! As long as they can't tell which tor user you are they can't track your browsing activity or associate it to any one tor user. That's the goal. Currently tor browser sticks out like a sore thumb by trying to appear identical no matter who uses it, which is fragile because any one data point unaccounted for unmasks everyone.

IAmBroomyesterday at 12:13 PM

> it would just be another signal to fingerprint: "Oh, your browser is returning random values? Must be a Tor browser user".

You'd have to fingerprint the browser first to determine that the "random values" were indeed coming from it.