Conflicting metadata which could lead to fingerprinting
Tor Browser Version: 60.8.0esr OS: MacOS Mojave
When I go to http://whatsmyos.com/ it tells me I am using Windows 7, which is good.
However, if I go to https://brave.com it figures out that I am on MacOS and automatically defaults to the MacOS download.
This is conflicting metadata and is prone to fingerprinting (which is exactly what the fake Windows 7 info was trying to avoid).
After checking on panopticlick, I realized the conflict comes from:
User Agent: Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0
Platform: MacIntel
Perhaps it's as easy as making the 'Platform' HTTP header just match the Windows user agent?
Trac:
Username: bigsteve1337