News for hackers. Stuff that matters.
Re:Tor Anonymity: Things Not to Do by IanCal on Monday January 04, 2016 @06:02AM (#10834883)
Interesting. I'd have thought custom sizing would be bad for between-site tracking as it's much more likely to be unique, whereas fullscreen wouldn't have been much of a problem since resolutions are pretty standardised.
Re:Tor Anonymity: Things Not to Do by wfo on Monday January 04, 2016 @02:36PM (#10837915)
Sure but you shouldn't be connecting as distinct psuedo-identities during the same Tor session (mentioned in the article); if a custom browser size is associated with a one-time-use anonymous session then it shouldn't be a problem except that it leaks information about what window sizes are possible on your system, and your custom resize is very unlikely to be random; probably predictably proportional to your actual screen size.
Re:Tor Anonymity: Things Not to Do by corin_ on Monday January 04, 2016 @07:03AM (#10835088)
Hmm, my thinking was that Tor browser would randomly pick a size, but maybe it only has a certain number of options to make sure every user crosses with plenty of other users too? In which case resizing of any sort would make you more unique, just within the session. (I'm no expert on Tor/browser.)
Re:Tor Anonymity: Things Not to Do by ethbro on Monday January 04, 2016 @07:59AM (#10835356)
For those with knowledge of how window size affects page layout, is there any technical reason for Tor browser not to fuzz with a random +/- 5 pixels while in a single session (say, on every page load)?

Similar to what the nosleep utility does with jiggling the mouse by an unnoticable +/- a few pixels.

Re:Tor Anonymity: Things Not to Do by JoshTriplett on Monday January 04, 2016 @08:06AM (#10835387)
Too easy to average that away.

Could make sense to do so on a session-by-session basis, though.

Re:Tor Anonymity: Things Not to Do by startling on Monday January 04, 2016 @10:03AM (#10835894)
Randomly picking a size still gives a good chance of being able to track user connections across a single session.