Tor is hiring! Open roles:
👥 Director of People and HR
🔧 Senior Director for Internal Structures and Support
📊 Nonprofit Accounting Specialist (Part-time)
Whether you're passionate about culture, strategy, or numbers, there’s a role for you here. https://www.torproject.org/about/jobs/
@torproject why did you lie to your users about removing OS spoofing?
> lie to your users about removing OS spoofing
Could you explain a bit more what you mean by this? @torproject
@eliasr they removed the anti-fingerprinting feature where no matter what operating system you use the browser will tell the website you’re on windows 10, then they made blog posts claiming they didn’t, and then when that didn’t work they admitted they removed it and made it only spoof OS version number. if you were using it on macOS or linux before this change it would report windows to the websites, but now it reports the correct operating system
@jakeyounglol @eliasr Please read the Tor Browser user manual https://tb-manual.torproject.org/anti-fingerprinting/#operating-system-spoofing
@ggus thanks, but for me this explanation there does not make sense:
"Some privacy tools or users suggest that making all users appear as Windows would offer the best cover. However, perfectly spoofing across all browser contexts is not possible and active fingerprinting methods ([...]) can often be used to infer aspects of the hardware or operating system."
Is the existence of active fingerprinting methods really a reason to provide less protection regarding the user agent?
@eliasr @jakeyounglol The goal of Tor Browser's anti-fingerprinting strategy is to reduce uniqueness without creating a false sense of security. Pretending to provide full OS spoofing (when it can be detected by active methods) could mislead users into taking greater risks, believing their privacy is better protected than it actually is.
For the full discussion about it, see the privacy guides forum:
https://discuss.privacyguides.net/t/accuracy-of-sam-bent-video-criticizing-tor-and-privacyguides-on-http-header-os-spoofing-removal/29136/7