Git/firefox-user.js
1
0
Fork 0
mirror of https://github.com/arkenfox/user.js.git synced 2025-11-03 23:35:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

4700: revamp, closes #485

Browse Source
This commit is contained in:
Thorin-Oakenpants
2018-08-17 09:09:01 +00:00
committed by GitHub
parent 9e67f982ab
commit 6fb2f25e65
1 changed files with 19 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
user.js
View File

@@ -1634,36 +1634,30 @@ user_pref("webgl.enable-debug-renderer-info", false);
// ***/ // ***/
/*** 4700: RFP (4500) ALTERNATIVES - NAVIGATOR / USER AGENT (UA) SPOOFING /*** 4700: RFP (4500) ALTERNATIVES - NAVIGATOR / USER AGENT (UA) SPOOFING
Spoofing your UA to *LOWER* entropy *does* *not* *work*. It may even cause site breakage This is FYI ONLY. These prefs are INSUFFICIENT(a) on their own, you need
depending on your values. Even if you spoof, like TBB (Tor Browser Bundle) does, as the to use RFP (4500) or an extension, in which case they become POINTLESS.
latest ESR, it still *does* *not* *work*. There are two main reasons for this. (a) Many of the components that make up your UA can be derived by other means.
1. Many of the components that make up your UA can be derived by other means. And when And when those values differ, you provide more bits and raise entropy.
those values differ, you provide more bits and raise entropy. Examples of leaks include Examples of leaks include navigator objects, date locale/formats, iframes,
navigator objects, date locale/formats, iframes, headers, resource://URIs, headers, tcp/ip attributes, feature detection, and **many** more.
feature detection and more. ALL values below intentionally left blank - use RFP, or get a vetted, tested
2. You are not in a controlled set of significant numbers, where the values are enforced extension and mimic RFP values to *lower* entropy, or randomize to *raise* it
by default. It works for TBB because for TBB, the spoofed values ARE their default.
* We do not recommend UA spoofing yourself, leave it to privacy.resistFingerprinting (see 4500)
which is already plugging leaks (see 1 above) the prefs below do not address
* Values below are for example only based on the current TBB at the time of writing
***/ ***/
user_pref("_user.js.parrot", "4700 syntax error: the parrot's taken 'is last bow"); user_pref("_user.js.parrot", "4700 syntax error: the parrot's taken 'is last bow");
/* 4701: navigator.userAgent leaks in JS /* 4701: navigator.userAgent ***/
* [NOTE] Setting this will break any UA spoofing extension whitelisting ***/ // user_pref("general.useragent.override", ""); // (hidden pref)
// user_pref("general.useragent.override", "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0"); // (hidden pref) /* 4702: navigator.buildID (
/* 4702: navigator.buildID (see gecko.buildID in about:config) reveals build time * reveals build time down to the second
* down to the second which defeats user agent spoofing and can compromise OS etc
* [1] https://bugzilla.mozilla.org/583181 ***/ * [1] https://bugzilla.mozilla.org/583181 ***/
// user_pref("general.buildID.override", "20100101"); // (hidden pref) // user_pref("general.buildID.override", ""); // (hidden pref)
/* 4703: navigator.appName ***/ /* 4703: navigator.appName ***/
// user_pref("general.appname.override", "Netscape"); // (hidden pref) // user_pref("general.appname.override", ""); // (hidden pref)
/* 4704: navigator.appVersion ***/ /* 4704: navigator.appVersion ***/
// user_pref("general.appversion.override", "5.0 (Windows)"); // (hidden pref) // user_pref("general.appversion.override", ""); // (hidden pref)
/* 4705: navigator.platform leaks in JS ***/ /* 4705: navigator.platform ***/
// user_pref("general.platform.override", "Win32"); // (hidden pref) // user_pref("general.platform.override", ""); // (hidden pref)
/* 4706: navigator.oscpu leaks in JS ***/ /* 4706: navigator.oscpu ***/
// user_pref("general.oscpu.override", "Windows NT 6.1"); // (hidden pref) // user_pref("general.oscpu.override", ""); // (hidden pref)
/* 4707: general.useragent.locale (related, see 0204-deprecated FF59+) ***/
/*** 5000: PERSONAL [SETUP] /*** 5000: PERSONAL [SETUP]
Non-project related but useful. If any of these interest you, add them to your overrides ***/ Non-project related but useful. If any of these interest you, add them to your overrides ***/