[tor-talk] Fingerprinting issue in Tor Browser for macOS

2018-04-29 Thread Nathaniel Suchy (Lunorian)
When using Tor Browser for macOS, the EFF's tool panoptclick shows that a large amount of fonts are available, while Tor Browser for Linux claims only Wingdings is available. This could allow a website know whether a Tor User is using Linux or not helping to create a unique fingerprint. Thoughts?

Re: [tor-talk] How do the OBFS4 "built-in" Bridges work?

2018-04-29 Thread Nathaniel Suchy (Lunorian)
So the concerns I brought up are already addressed in an upcoming update? Cheers, Nathaniel Jacki M: > Torbrowser 8a3 added moat which I’m actually fetches new bridges, without > requiring you to go to bridges.torproject.org. > > Bug 23136: Moat integration (fetch bridges for the user) > Downlo

Re: [tor-talk] How do the OBFS4 "built-in" Bridges work?

2018-04-29 Thread Jacki M
Torbrowser 8a3 added moat which I’m actually fetches new bridges, without requiring you to go to bridges.torproject.org. Bug 23136: Moat integration (fetch bridges for the user) Download the latest alpha https://dist.torproject.org/torbrowser/8.0a6/ Remember this is an alpha and should only be us

Re: [tor-talk] How do the OBFS4 "built-in" Bridges work?

2018-04-29 Thread Sydney
Hi Nathaniel, There’s no reason bridges can’t run on “non-standard ports”. I run a bridge on port 8080 (common alternative to port 80) with obfs4 and it gets utilised quite a bit. The server running the bridge runs a fairly innocuous website to avoid attention being drawn to it, however, that pr

Re: [tor-talk] How do the OBFS4 "built-in" Bridges work?

2018-04-29 Thread Nathaniel Suchy (Lunorian)
Thank you for clarifying that. The obfs4 bridges you can get at bridges.torproject.org also pose an interesting risk, the ports each Bridge IP Address is using seem to be non-standard, I'm in the US and most networks I am at do not censor although sometimes certain ports at public wifi networks are

Re: [tor-talk] How do the OBFS4 "built-in" Bridges work?

2018-04-29 Thread Matthew Finkel
On Sun, Apr 29, 2018 at 02:06:49PM -0400, Nathaniel Suchy (Lunorian) wrote: > I see that Tor Browser, for users who are censored in their country, > work, or school (or have some other reason to use bridges) has a variety > of built in bridges. Once of those are the OBFS4 bridges. My first > though

[tor-talk] How do the OBFS4 "built-in" Bridges work?

2018-04-29 Thread Nathaniel Suchy (Lunorian)
I see that Tor Browser, for users who are censored in their country, work, or school (or have some other reason to use bridges) has a variety of built in bridges. Once of those are the OBFS4 bridges. My first thought would be these are hard coded, of course giving everyone the same set of bridges i