Tor Browser’s Latest Update Could Get You Fingerprinted...

Summary

The Tor Project recently made a controversial decision to remove the OS spoofing feature in Tor Browser version 14.5. This change, designed to reduce user anonymity, removes an essential privacy layer that made all Tor users appear as though they were using Windows, regardless of their actual operating system. While developers argue this improves security and simplifies the browser, the removal exposes privacy-conscious users, particularly those on rare operating systems, to increased fingerprinting and identification risks. The video critiques this decision, urging users to reconsider their privacy tools and adopt solutions like Tails or Whonix for better protection.

Takeaways

• 😀 The Tor Project recently removed the OS spoofing feature, which was a crucial part of its privacy model.
• 😀 OS spoofing made all Tor users appear to be on Windows, regardless of their actual operating system, reducing identifiable traits and ensuring anonymity.
• 😀 The removal of OS spoofing has been controversial, with concerns that it exposes users and makes them easier to track.
• 😀 The decision to remove this feature was based on the belief that allowing user control over such settings could increase entropy, which the developers viewed as detrimental to privacy.
• 😀 Historically, OS spoofing helped users blend in with others, minimizing the risk of identification through unique OS fingerprints.
• 😀 Privacy advocates argue that the change will result in users with uncommon operating systems becoming more easily identifiable and trackable.
• 😀 The removal of the feature creates more consistency in user fingerprints but at the cost of reducing anonymity for users of rare OS systems like Qubes or BSD.
• 😀 The Tor team has defended the change by arguing that it simplifies the browser and avoids compatibility issues, but some developers believe it compromises privacy.
• 😀 Users of high-security systems, like Qubes or BSD, are now more exposed as their operating system can be easily identified, which undermines their anonymity.
• 😀 Alternatives to mitigate the loss of OS spoofing include using privacy-focused operating systems like Tails or Whonix, which provide better anonymity and system isolation.

Q & A

Why did the Tor Project remove the operating system spoofing feature in Tor Browser version 14.5?

The Tor Project removed the operating system spoofing feature to simplify the browser and reduce entropy, despite concerns from privacy advocates. This decision was made to avoid adding too much variability and complexity in the Tor Browser’s behavior, which could potentially undermine its privacy model.

What was the original purpose of the operating system spoofing feature in Tor Browser?

The operating system spoofing feature in Tor Browser was designed to make all users appear as if they were using Windows, regardless of their actual operating system. This helped reduce identifiable traits, contributing to privacy by blending users into a uniform crowd, thereby decreasing the chances of being uniquely identified.

How does the removal of the OS spoofing feature impact Tor users, especially those using rare operating systems like Qubes or BSD?

The removal of the OS spoofing feature makes users of rare operating systems, such as Qubes or BSD, more identifiable. These users no longer benefit from the uniformity that spoofing provided, making it easier for adversaries to track and fingerprint them based on their operating system.

What is the significance of metadata and how does it relate to privacy in the context of Tor Browser?

Metadata plays a crucial role in identifying individuals. By reducing identifiable traits through features like OS spoofing, Tor Browser aims to make users harder to pinpoint. Even small details can dramatically narrow down the pool of potential targets, which is why privacy tools like Tor emphasize minimizing such information leaks.

What argument did the developers make for removing the OS spoofing feature?

The developers argued that keeping the OS spoofing feature would increase entropy, making the Tor Browser less consistent and harder to maintain. They also believed that adding user options to enable or disable this feature would open the door for inconsistencies, which could weaken the privacy model.

How does the OS spoofing feature relate to the safest mode in Tor Browser?

In Tor Browser’s safest mode, OS spoofing was a critical privacy layer that helped prevent users from being uniquely identified through their operating system in HTTP headers. With OS spoofing removed, users are more exposed, even when using safest mode with JavaScript disabled, which was meant to reduce attack surfaces.

What is the potential issue with passive fingerprinting after the removal of OS spoofing?

After the removal of OS spoofing, passive fingerprinting becomes more effective. Adversaries can track users across websites by correlating consistent data points like the operating system, which was previously masked. This creates a stronger, more precise fingerprint that can be used to identify users despite using Tor.

What is the impact of the change on users who disable JavaScript for privacy?

For users who disable JavaScript to enhance privacy, the removal of OS spoofing significantly reduces their protection. Since JavaScript-based and HTTP header-based fingerprinting now align, these users are more easily identified and tracked across different websites, weakening the overall privacy protection.

What are some of the alternative options to mitigate the privacy impact of the OS spoofing removal?

To mitigate the privacy impact, users can opt to use privacy-hardened operating systems like Tails or Whonix, which offer better isolation for Tor usage. Tails runs entirely from RAM and does not leave traces, while Whonix isolates the Tor routing and browsing activities into separate virtual machines, preventing exposure of the actual operating system.

How do Tails and Whonix differ from general-purpose operating systems like Qubes in terms of privacy?

Tails and Whonix are specifically designed for privacy, offering stronger isolation between the user’s actual system and the browsing environment. In contrast, general-purpose systems like Qubes may still expose the user’s operating system if Tor Browser leaks that information. Tails and Whonix prevent this by compartmentalizing traffic and using hardened configurations.