search

guardianproject / Orweb

We are EOL this project. Please use Lightning Browser or wait for Orfox instead
https://guardianproject.info/2015/06/30/orfox-aspiring-to-bring-tor-browser-to-android/
Other
91 stars 45 forks source link

HTTP_ACCEPT leaks locale #47

Open reezer opened 10 years ago

reezer commented 10 years ago

It appears that Orweb leaks the phone locale in HTTP_ACCEPT headers, even if the locale is set. Since the locale is, especially for smaller countries a good identifier (https://panopticlick.eff.org/) it makes it easier for an attacker to guess a visitors real identity.

dillbyrne commented 10 years ago

Confirmed here. I recommend setting the default to match firefox . I have a list of browser profiles including accept headers for many browsers at https://github.com/dillbyrne/random-agent-spoofer/blob/master/data/json/useragents.json for reference .

For the language header I would suggest a using en-US as the default it is the most common and therefore the most effective for blending in. If a user wanted to use en-GB, en-CA or others for example these options could be provided in the locale dropdown but they would have to be chosen.

reezer commented 10 years ago

I think these are two different issues:

One is that small country problem. This can be fixed by setting defaults. I am not sure, but it always seem to be English all the time anyway (for the User Agent).

The other issue is that HTTP_ACCEPT does not match this setting.

hughobrien commented 10 years ago

An option to configure the exact contents of the HTTP headers, including the accepted data formats would be useful. In particular, I leak en-IE, which is very identifying.