browser footprint

2008-07-11 Thread Karsten N.
I have read a thread at the JonDos forum about browser footprints. A browser is not only identified by the user-agent, it is possible to use the accepted language, the accepted content, accepted charsets... To create a highly anonymous group, many user should use the same settings for HTTP

Re: browser footprint

2008-07-11 Thread krishna e bera
Thanks for running a check site and helping with privacy/anonymity! I believe torbutton does this sort of scrubbing. You can see what it does and why at https://torbutton.torproject.org/dev/design/ It would be nice to have a torbutton for Konqueror.

Re: question about cached-status

2008-07-11 Thread Nick Mathewson
On Thu, Jul 10, 2008 at 02:59:57PM -0700, Steve Southam wrote: Hi Hi! Since you replied to Roger's 0.2.0.29-rc email, I initially assumed that you were referring to the directory protocol as used in 0.2.0.x. For 0.1.2.x and earlier, the answers are different. But since your subject line says

Re: browser footprint

2008-07-11 Thread Lexi Pimenidis
The problem is somewhat deeper: you can construct HTML/CSS combinations, which are rendered differently by the browsers. Thus you can have e.g. a start page or a menu which contains different links - depening on the browser of the user, all but one links are hidden - thus, from the link which has

Re: Circuit question

2008-07-11 Thread Nick Mathewson
On Sat, Jul 05, 2008 at 12:23:18PM +0300, Evgeniy Minakov wrote: Hello, I have a question about the circuit construction. The getinfo circuit-status sometime returns response without any exit nodes. Which node used as exit node in this case? First, you might be wrong about what nodes are

Re: browser footprint

2008-07-11 Thread F. Fox
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Karsten N. wrote: I have read a thread at the JonDos forum about browser footprints. A browser is not only identified by the user-agent, it is possible to use the accepted language, the accepted content, accepted charsets... To create a

Re: browser footprint

2008-07-11 Thread Karsten
krishna e bera schrieb: Thanks for running a check site and helping with privacy/anonymity! Not my site, its done by JonDos (JAP) I believe torbutton does this sort of scrubbing. You can see what it does and why at https://torbutton.torproject.org/dev/design/ Thanks, I will have a look at

Re: Circuit question

2008-07-11 Thread Nick Mathewson
On Fri, Jul 11, 2008 at 11:37:04AM -0400, Nick Mathewson wrote: [oops. Didn't end the paragraph.] First, you might be wrong about what nodes are exits. The Exit flag in the networkstatus document is not a perfect view of whether a node can be used as an exit: to actually see whether a node