On Thursday, June 9, 2016 at 3:49:55 PM UTC+2, entr0py wrote: > > More importantly, Tor Browser will only make you "anonymous" relative to > other Tor Browser users, not relative to the general population as a whole. > A browser width of 1000 if likely *unique* to Tor Browser since many > websites these days will use 1200+ pixels to draw optimally, and any > "normal" user would expand the width of their browser. >
I know, but since there are so many Tor users that's a large group to hide in. My laptop for example has a more obscure screen resolution of 1366x768. So it makes sense to use a default that may be unique to the Tor browser, but *is* the same among all Tor browsers. > * Even the ubiquitous 1920x1080 monitor lost to smaller screens (for Tor > Browser). That seems to make sense since the TBB insists that the user use the default screen size. >> In total, the browser leaks about 14 bits of identifying > >> information. whereas on SubgraphOS, this number is significantly > >> lower (around 7 bits, if memory serves well) Even with JavaScript > >> disabled, it only reduces the amount of identifying information to > >> 11 bits. > > It would be really helpful to see the detailed comparison with Subgraph. > What other variables differed besides screen size? > I'll make some screenshots of the results from Whonix compared to Subgraph. (I can't get the Tor browser to start on Subgraph atm) It'd be interesting to see what makes Subgraph different from Whonix since they both use the exact same version of the Tor browser. Of course it would be so much easier if one could just have an 'insider look' at the NSA so we know exactly what they're using to track Tor users :) Passive timing correlation seems somewhat far fedged to me since nodes are scattered across the globe. hacking into the endpoint seems most plausible but that doesn't work so well on Whonix.. -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/09eb0d03-cba4-4135-9d89-60002fe175ad%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
