How to stop Pale Moon from Giving out Information

General discussion and chat (archived)
Thehandyman1957

How to stop Pale Moon from Giving out Information

Post by Thehandyman1957 » 2016-07-14, 19:21

Hello all. I have a curious question. So today I was curious on what info Pale Moon was giving to web sites upon request
and I found this web site.
http://mybrowserinfo.com/detail.asp?bhcp=1

And it gave me these results. It surprised me that it was telling them what Operating system I was using. I would like to stop that if possible.
I realize that web pages need a certain amount of info just to show the page right but is there a way to minimize
this exposure to the max minimum's? :think:

It seems to me that after all the other add on's and using a VPN there are still ways to fingerprint a person this way. :problem:

adisib
Lunatic
Lunatic
Posts: 379
Joined: 2015-06-13, 03:34
Location: KY

Re: How to stop Pale Moon from Giving out Information

Post by adisib » 2016-07-14, 19:33

I believe the Operating System information only comes from the user-agent string. You can try setting "general.useragent.override" to your current user-agent minus anything about the operating system (in your case, remove the "Windows NT 5.1;").

dark_moon

Re: How to stop Pale Moon from Giving out Information

Post by dark_moon » 2016-07-14, 21:29

As adisib say, the OS info come from your useragent.
You can modify that string of course but *can* get then problems with websites.

Thehandyman1957

Re: How to stop Pale Moon from Giving out Information

Post by Thehandyman1957 » 2016-07-15, 01:43

Well I decided to give this a try.
Random Agent Spoofer 0.9.1-signed

It allows me to choose which strings to use and which ones to exclude.
So I just picked all the FF 20 and above and all the Pale Moon ones.

I can turn it off on the fly if needed. :thumbup:

dark_moon

Re: How to stop Pale Moon from Giving out Information

Post by dark_moon » 2016-07-15, 08:23

Remember: Use random useragents make you more unique which makes you more trackable.
And just change the useragent string doesn't make real difference because with JavaScript the site can check your real useragent.

So you have better privacy without that.

User avatar
Fedor2
Astronaut
Astronaut
Posts: 675
Joined: 2016-04-11, 01:26

Re: How to stop Pale Moon from Giving out Information

Post by Fedor2 » 2016-07-15, 22:39

Whats a problem with os? Other browsers gives that information too. And there are advanced methods of os detection irrespective of the userganet string. See http://www.browserleaks.com/firefox

Thehandyman1957

Re: How to stop Pale Moon from Giving out Information

Post by Thehandyman1957 » 2016-07-16, 00:10

Fedor2 wrote:Whats a problem with os? Other browsers gives that information too. And there are advanced methods of os detection irrespective of the userganet string. See http://www.browserleaks.com/firefox
Yup, I got that covered too. ;)
Screenshot - 7_15_2016 , 5_10_51 PM.png

Thehandyman1957

Re: How to stop Pale Moon from Giving out Information

Post by Thehandyman1957 » 2016-07-16, 00:12

dark_moon wrote:Remember: Use random useragents make you more unique which makes you more trackable.
And just change the useragent string doesn't make real difference because with JavaScript the site can check your real useragent.

So you have better privacy without that.
Not sure how that makes me more unique :think:
Perhaps you could explain a bit and enlighten me ;)

As for JavaScript, that's what Noscript is for. :thumbup:

User avatar
New Tobin Paradigm
Off-Topic Sheriff
Off-Topic Sheriff
Posts: 6906
Joined: 2012-10-09, 19:37
Location: Sector 001

Re: How to stop Pale Moon from Giving out Information

Post by New Tobin Paradigm » 2016-07-16, 00:19

OS Platform and Locale are not worthwhile identifiable information.. As for reading the preference files.. Well.. What we could do is simply rename the files in omnija and adjust code that looks for those preferences js files.. That would make it so that this tool couldn't find the files with a resource uri call..
Image
- This program cannot be run in DOS mode. -
https://binaryoutcast.com/ | Freenode #binaryoutcast | http://thereisonlyxul.org/

Thehandyman1957

Re: How to stop Pale Moon from Giving out Information

Post by Thehandyman1957 » 2016-07-16, 03:56

Matt A Tobin wrote:OS Platform and Locale are not worthwhile identifiable information..
I'm not sure I would agree. I mean, if I was using Chrome and W7 then I would agree.
But let's face it. How many folks out there are using XP and Pale Moon at the same time.
I just feel like that narrows it down quite a bit.

You could label me a schizophrenic paranoid freak and you would probably be close... :mrgreen:

User avatar
Fedor2
Astronaut
Astronaut
Posts: 675
Joined: 2016-04-11, 01:26

Re: How to stop Pale Moon from Giving out Information

Post by Fedor2 » 2016-07-16, 04:13

How many folks out there are using XP and Pale Moon at the same time
Quite enough i say.

Suppose you already hidden your IP, you must know about other things beside os, that distinguish you. From overall screen dimensions to begin with, to taskbar size, which on xp is differ from win7.

Thehandyman1957

Re: How to stop Pale Moon from Giving out Information

Post by Thehandyman1957 » 2016-07-16, 07:27

Fedor2 wrote:
How many folks out there are using XP and Pale Moon at the same time
Quite enough i say.

Suppose you already hidden your IP, you must know about other things beside os, that distinguish you. From overall screen dimensions to begin with, to taskbar size, which on xp is differ from win7.
Yes I know, but I was comparing to the likes of W7 and Chrome. All those things you mention have been dealt with.

User avatar
LimboSlam
Board Warrior
Board Warrior
Posts: 1029
Joined: 2014-06-09, 04:43
Location: USA

Re: How to stop Pale Moon from Giving out Information

Post by LimboSlam » 2016-07-16, 08:13

I suggest you all go through this: http://www.ghacks.net/2015/08/18/a-comp ... -settings/. Though a lot of it we don't even have, so you might want to take advantage of Find.
With Pale Moon by my side, surfing the web is quite enjoyable and takes my headaches away! :)
God is not punishing you, He is preparing you. Trust His plan, not your pain.#‎TrentShelton #‎RehabTime

dark_moon

Re: How to stop Pale Moon from Giving out Information

Post by dark_moon » 2016-07-16, 08:40

Thehandyman1957 wrote:
dark_moon wrote:Remember: Use random useragents make you more unique which makes you more trackable.
And just change the useragent string doesn't make real difference because with JavaScript the site can check your real useragent.

So you have better privacy without that.
Not sure how that makes me more unique :think:
Perhaps you could explain a bit and enlighten me ;)

As for JavaScript, that's what Noscript is for. :thumbup:
A example: You use your Pale Moon setup with your settings & addons with default useragent which include the Firefox compatibility mode: you are more unique then users with default Pale Moon settings, maybe you the only the ones with that setup then you are unique and can be easy trackable because no other users have that *ID*
If you now use another useragent, for example chrome you are definite unique because no chrome user have that setup.
So a website with normal useragent see you use chrome and give you chrome specific content which can't be displayed in Pale Moon- you get errors. Or the site uses JavaScript (yes NoScript protect you, but only until you allow JavaScript) and make more tests to test your real useragent and see you use Pale Moon/ Firefox.
Short: You *can* get website problems and change the useragent will make you more unique, also more trackable because of the current setup which create your ID.

The only way to be less unique is using default browser without any settings, addons, nothing.

Hope that make it more clear :)

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 26098
Joined: 2011-08-28, 17:27
Location: 58°2'16"N 14°58'31"E
Contact:

Re: How to stop Pale Moon from Giving out Information

Post by Moonchild » 2016-07-16, 08:43

LimboSlam wrote:I suggest you all go through this: http://www.ghacks.net/2015/08/18/a-comp ... -settings/. Though a lot of it we don't even have, so you might want to take advantage of Find.
I suggest you don't tweak the browser to the point of breaking. The list there has a good number of settings that make Pale Moon most definitely underperform, be crippled in some ways, and are certainly never recommended. I dare also say that I won't be inclined at all to provide much support for people who run into issues because they have (unknowingly) disabled features they want to have.

There is no "way to stop Pale Moon from giving out information" because it is a web client. Web clients have to give out information to servers to indicate what web client it is. Web servers make use of the (non-personal) information contained in web requests and query-able from the browser itself to present responsive sites (and no I'm not talking about this responsive design for mobile stuff).
Giving web servers false information can break your web experience in all sorts of ways.
"There will be times when the position you advocate, no matter how well framed and supported, will not be accepted by the public simply because you are who you are." -- Merrill Rose
Image

User avatar
New Tobin Paradigm
Off-Topic Sheriff
Off-Topic Sheriff
Posts: 6906
Joined: 2012-10-09, 19:37
Location: Sector 001

Re: How to stop Pale Moon from Giving out Information

Post by New Tobin Paradigm » 2016-07-16, 09:29

Now that I look at exactly what that site cites as info it can gather.. Especially from default preferences.. And yes it is only default preferences (which live in the source code) no settings in your user profile are exposed as they are not gotten via resources uri. I really can't see what value any of this information would have to anyone.
Image
- This program cannot be run in DOS mode. -
https://binaryoutcast.com/ | Freenode #binaryoutcast | http://thereisonlyxul.org/

User avatar
Moonraker
Board Warrior
Board Warrior
Posts: 1261
Joined: 2015-09-30, 23:02
Location: uk.

Re: How to stop Pale Moon from Giving out Information

Post by Moonraker » 2016-07-16, 09:40

Strange thread.
If we were to browse totally incognito then the web would not work correctly.Personally i dont have a problem with websites knowing what operating system i use or what architecture it is and i see no problems with this.
No personally identifiable information is ever stored on my machine or sent in a browser.(except my approximate location i suppose.).
Bank details cannot be retrieved etc so i dont see any immediate risk or danger.
Maybe paranoia is the main issue here and we have certain physicians for this cripplling internet disease.
Xenial puppy linux 32-bit.
Tahrpup 6.0.5.32 bit.
Pale moon 28.8.1.

Thehandyman1957

Re: How to stop Pale Moon from Giving out Information

Post by Thehandyman1957 » 2016-07-16, 16:21

Moonraker wrote:Strange thread.
Maybe paranoia is the main issue here and we have certain physicians for this cripplling internet disease.
LOL :lol: Now that's funnny ;) Perhaps I need some chair time :mrgreen:

Thehandyman1957

Re: How to stop Pale Moon from Giving out Information

Post by Thehandyman1957 » 2016-07-16, 16:22

Moonchild wrote: Giving web servers false information can break your web experience in all sorts of ways.
Yes, I learned my lesson long ago not to mess to much with the nuts and bolts of things.

I have messed up Xp several times listening to web pages like that. :oops:

And I saw yesterday first hand how the spoofing can mess up a web page.

User avatar
New Tobin Paradigm
Off-Topic Sheriff
Off-Topic Sheriff
Posts: 6906
Joined: 2012-10-09, 19:37
Location: Sector 001

Re: How to stop Pale Moon from Giving out Information

Post by New Tobin Paradigm » 2016-07-17, 05:48

When it comes to User Agents (not really the primary issue here) we have enough issues being our selves vs pretending to be Firefox.. Spoofing something else.. Say Chrome or IE is just asking for trouble.

Also, let me restate again.. The resource URI items such as the default preferences (greprefs, firefox.js, firefox-branding.js) continue to be exactly that.. Default preferences as defined in our source code. Profile prefs.js (the one in your profile directory) is not accessible from a resource uri.
Image
- This program cannot be run in DOS mode. -
https://binaryoutcast.com/ | Freenode #binaryoutcast | http://thereisonlyxul.org/

Locked