None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
The client IP address recorded in the webserver logs for such a connection is the one of the Tor exit node used by the T(A)ILS user at this time.
8 years ago
None

Resource updated

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
The "wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.ca.po" file was changed. 8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Torbutton 1.2.5, included in T(A)ILS 0.5
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Affected versions
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Beware! Changing this setting in the Torbutton preferences window is **not** effective.
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
... then save and quit. You can now run Iceweasel.
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
user_pref("extensions.torbutton.spoof_english", false);
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
... this opens a text editor. Delete the line that says:
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
gksudo gedit /etc/iceweasel/profile/user.js
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Run the following command in a terminal:
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
The following steps need to be done immediately after boot, **before** running Iceweasel.
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Mitigation on T(A)ILS 0.5
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Upgrade to T(A)ILS 0.6.
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Solution
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
[[!meta title="Iceweasel exposes a rare User-Agent"]]
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
[[!tag security/fixed]]
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
A Torbutton bug ([[!debbug 595375]]) makes Iceweasel expose a recognizable User-Agent when the "Spoof US English Browser" setting is disabled, which is the case in T(A)ILS 0.5.
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Impact
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
System administrators, webmasters and anyone able to read the logs of a website are able to single out, amongst the visitors, the ones that are using an affected Torbutton extension *and* have explicitly disabled the "Spoof US English Browser" setting.
8 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
While T(A)ILS users are obviously not the only ones in this case, such a bug eases fingerprinting.
8 years ago

Search