From: Soren Stoutner Date: Mon, 23 Jan 2017 19:55:00 +0000 (-0700) Subject: Update Guide → User Agent. Also update the list of user agents. X-Git-Tag: v1.15~24 X-Git-Url: https://gitweb.stoutner.com/?a=commitdiff_plain;h=777cb9ce4ddc3df88e7b34f958ef3851ff1a0514;p=PrivacyBrowserAndroid.git Update Guide → User Agent. Also update the list of user agents. --- diff --git a/app/src/main/assets/en/guide_user_agent.html b/app/src/main/assets/en/guide_user_agent.html index 5abfdcb4..2c7d7072 100644 --- a/app/src/main/assets/en/guide_user_agent.html +++ b/app/src/main/assets/en/guide_user_agent.html @@ -17,56 +17,47 @@ along with Privacy Browser. If not, see . --> - - - - - - -

Browser Identification

- -

When web browsers connect to websites, they send a user agent, which identifies the browser and the - rendering capabilities it possesses. They website can use this information to decide which version of the - website to send to the browser. For example, many websites have different versions for desktop and - mobile browsers.

- -

By default, Privacy Browser uses the built-in user agent that comes with the WebView installed on the - device. You can see what it is by going to the Settings screen and setting the User - agent to WebView Default. The screenshot below shows a Nexus 6P running Android 6.0.1 - with Android System WebView 51.0.2704.81 installed.

- -

- -

There is enough information in the user agent that sometimes only a few visitors to a website will be the same. If the user agent - is combined with another piece of non-unique identifying information, often it results in a unique fingerprint. - The Electronic Frontier Foundation created a tool called Panopticlick - to demonstrate how much information can be gleaned from these sources. If this test is run with JavaScript enabled the - amount of information that is disclosed increases greatly. Browser Leaks and - Am I Unique are also good sources of information.

- -

Privacy Browser allows you to change the user agent. There are several preset options that match common browsers and operating systems. - Privacy Browser defaults to its own user agent, which is simply PrivacyBrowser/1.0. For tracking purposes, anything that is rare is easier - to track. If Privacy Browser becomes common and many people use PrivacyBrowser/1.0 as their user agent, it will be a good choice for privacy. - Firefox or Chrome are the most common user agents, but they auto-update and their version numbers change so quickly - that it is likely the user agents included in Privacy Browser will often be out of step with the majority of user agents in the - server logs.

- -

A second reason to change the user agent is to convince the web server to send the desktop version of the web page, which often works - better on modern smart phones than the mobile version. For this purpose, PrivacyBrowser/1.0 works well, because web servers typically - default to the desktop version unless they recognize a phone browser agent.

- -

Android's WebView does not allow the user agent to be blank. If it is, WebView simply sends the default user-agent to the server.

- + + + + + + +

Browser Identification

+ +

When web browsers connect to websites, they send a user agent, which identifies the browser and the rendering capabilities it possesses. The web server can use this information to decide which version of the + website to send to the browser. For example, many websites have different versions for desktop and mobile browsers.

+ +

By default, Privacy Browser uses its own user agent, which is PrivacyBrowser/1.0. This sends a minimum of information to the web server. Because web servers do not recognize this to be a mobile user agent, + they typically display the desktop version of the site.

+ +

By comparison, WebView’s default user agent divulges a large amount of information about the hardware and softare of the device. On the Settings screen, selecting WebView Default as the + User agent displays the user agent that will be sent. The screenshot below shows a Nexus 6P running Android 7.1.1 with Android System WebView 55.0.2883.91 installed. Most web servers will recognize this as + a mobile browser and will display the mobile version of the site if they have one.

+ +

+ +

There is enough information in the user agent that sometimes only a few visitors to a website will be the same. If the user agent is combined with another piece of non-unique identifying information, often it results in a unique fingerprint. + The Electronic Frontier Foundation created a tool called Panopticlick to demonstrate how much information can be gleaned from these sources. If this test is run with JavaScript enabled the + amount of information that is disclosed increases greatly. Browser Leaks and Am I Unique are also good sources of information.

+ +

There are several preset user agents that match common browsers and operating systems. For browser fingerprinting purposes, anything that is rare is easier to track. If Privacy Browser becomes common and many people use PrivacyBrowser/1.0 + as their user agent, it will be a good choice for privacy. Firefox or Chrome are the most common user agents, but they auto-update and their version numbers change so quickly that it is likely the user agents included in Privacy Browser + will often be out of step with the majority of user agents in the server logs.

+ +

Android's WebView does not allow the user agent to be blank. If it is, WebView simply sends the default user agent to the server.

+ \ No newline at end of file diff --git a/app/src/main/assets/en/images/panopticlick.png b/app/src/main/assets/en/images/panopticlick.png index ba9cd5d2..e8170c09 100644 Binary files a/app/src/main/assets/en/images/panopticlick.png and b/app/src/main/assets/en/images/panopticlick.png differ diff --git a/app/src/main/assets/en/images/user_agent.png b/app/src/main/assets/en/images/user_agent.png index 50ac8dc2..f55c5cc7 100644 Binary files a/app/src/main/assets/en/images/user_agent.png and b/app/src/main/assets/en/images/user_agent.png differ diff --git a/app/src/main/res/values-de/strings.xml b/app/src/main/res/values-de/strings.xml index 5f1e0834..5a220cf9 100644 --- a/app/src/main/res/values-de/strings.xml +++ b/app/src/main/res/values-de/strings.xml @@ -200,17 +200,17 @@ Privacy Browser 1.0 WebView-Standard - Firefox 48 auf Android 6.0.1 - Chrome 52 auf Android 6.0.1 - Safari auf iOS 10 + Firefox 50 auf Android 7.1.1 + Chrome 55 auf Android 7.1.1 + Safari 10 auf iOS 10.2.1 Firefox 45 auf Linux - Chromium 52 auf Linux - Konqueror 4.14.23 auf Linux - Firefox 48 auf Windows 10 - Chrome 52 auf Windows 10 - Internet Explorer 11 auf Windows 10 + Chromium 55 auf Linux + Konqueror 4.14.26 auf Linux + Firefox 50 auf Windows 10 + Chrome 55 auf Windows 10 Edge 14 auf Windows 10 - Safari 9.1.2 auf OS X 10.11.6 + Internet Explorer 11 auf Windows 10 + Safari 10.0.2 auf macOS 10.12.2 Eigener Eigener User Agent diff --git a/app/src/main/res/values-es/strings.xml b/app/src/main/res/values-es/strings.xml index cea5627f..e2c01576 100644 --- a/app/src/main/res/values-es/strings.xml +++ b/app/src/main/res/values-es/strings.xml @@ -202,17 +202,17 @@ Navegador Privado 1.0 WebView por defecto - Firefox 48 en Android 6.0.1 - Chrome 52 en Android 6.0.1 - Safari en iOS 10 + Firefox 50 en Android 7.1.1 + Chrome 55 en Android 7.1.1 + Safari 10 en iOS 10.2.1 Firefox 45 en Linux - Chromium 52 en Linux - Konqueror 4.14.23 en Linux - Firefox 48 en Windows 10 - Chrome 52 en Windows 10 - Internet Explorer 11 en Windows 10 + Chromium 55 en Linux + Konqueror 4.14.26 en Linux + Firefox 50 en Windows 10 + Chrome 55 en Windows 10 Edge 14 en Windows 10 - Safari 9.1.2 en OS X 10.11.6 + Internet Explorer 11 en Windows 10 + Safari 10.0.2 en macOS 10.12.2 Personalizado Agente de usuario personalizado diff --git a/app/src/main/res/values-it/strings.xml b/app/src/main/res/values-it/strings.xml index 6573a6f0..29ef90ef 100644 --- a/app/src/main/res/values-it/strings.xml +++ b/app/src/main/res/values-it/strings.xml @@ -202,17 +202,17 @@ Privacy Browser 1.0 WebView Default - Firefox 48 su Android 6.0.1 - Chrome 52 su Android 6.0.1 - Safari su iOS 10 + Firefox 50 su Android 7.1.1 + Chrome 55 su Android 7.1.1 + Safari 10 su iOS 10.2.1 Firefox 45 su Linux - Chromium 52 su Linux - Konqueror 4.14.23 su Linux - Firefox 48 su Windows 10 - Chrome 52 su Windows 10 - Internet Explorer 11 su Windows 10 + Chromium 55 su Linux + Konqueror 4.14.26 su Linux + Firefox 50 su Windows 10 + Chrome 55 su Windows 10 Edge 14 su Windows 10 - Safari 9.1.2 su OS X 10.11.6 + Internet Explorer 11 su Windows 10 + Safari 10.0.2 su macOS 10.12.2 Personalizzato User agent personalizzato diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml index e18f8ab7..3d0a7db2 100644 --- a/app/src/main/res/values/strings.xml +++ b/app/src/main/res/values/strings.xml @@ -205,33 +205,33 @@ Privacy Browser 1.0 WebView Default - Firefox 48 on Android 6.0.1 - Chrome 52 on Android 6.0.1 - Safari on iOS 10 + Firefox 50 on Android 7.1.1 + Chrome 55 on Android 7.1.1 + Safari 10 on iOS 10.2.1 Firefox 45 on Linux - Chromium 52 on Linux - Konqueror 4.14.23 on Linux - Firefox 48 on Windows 10 - Chrome 52 on Windows 10 - Internet Explorer 11 on Windows 10 + Chromium 55 on Linux + Konqueror 4.14.26 on Linux + Firefox 50 on Windows 10 + Chrome 55 on Windows 10 Edge 14 on Windows 10 - Safari 9.1.2 on OS X 10.11.6 + Internet Explorer 11 on Windows 10 + Safari 10.0.2 on macOS 10.12.2 Custom

PrivacyBrowser/1.0 Default user agent - Mozilla/5.0 (Android 6.0.1; Mobile; rv:48.0) Gecko/48.0 Firefox/48.0 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 6P Build/MTC20F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.98 Mobile Safari/537.36 - Mozilla/5.0 (iPhone; CPU iPhone OS 10_0 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) Version/10.0 Mobile/14A5345a Safari/602.1 + Mozilla/5.0 (Android 7.1.1; Mobile; rv:50.0) Gecko/50.0 Firefox/50.0 + Mozilla/5.0 (Linux; Android 7.1.1; Nexus 6P Build/N4F26I) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36 + Mozilla/5.0 (iPhone; CPU iPhone OS 10_2_1 like Mac OS X) AppleWebKit/602.4.6 (KHTML, like Gecko) Version/10.0 Mobile/14D27 Safari/602.1 Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.21 (KHTML, like Gecko) konqueror/4.14.23 Safari/537.21 - Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0 - Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 - Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko + Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.75 Safari/537.36 + Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/534.34 (KHTML, like Gecko) konqueror/4.14.26 Safari/534.34 + Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:50.0) Gecko/20100101 Firefox/50.0 + Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7 + Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko + Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_2) AppleWebKit/602.3.12 (KHTML, like Gecko) Version/10.0.2 Safari/602.3.12 Custom user agent

Custom user agent