Hacklog Volume 1 Anonymity: IT Security & Ethical Hacking Handbook by Novelli Stefano & Silvestri Marco

Author:Novelli, Stefano & Silvestri, Marco [Novelli, Stefano]
Language: eng
Format: mobi
Published: 2019-03-20T16:00:00+00:00

Figure 23: results of a conventional Opera browser on Panopticlick

6.10.2 Defending yourself from Browser Fingerprinting

If you accurately followed each single recommendation from the previous topics, your browser is probably quite secure. You can do more, however. The trick is changing the game, handling the aforementioned resources. Each browser allows some “covering-up”, such as changing the font list, disabling plug-ins, etc. However, this topic would require more than a single book! You can use some extensions/add-ons, though, for example:

- FireGloves[79], available for Mozilla Firefox

- StopFingerprinting[80], available for Google Chrome

6.11 File Downloading

This category includes all the files that are downloaded but, once opened, may reveal information about your online data. When you need to open any files, you should use tools like a Virtual Machine on a host computer not connected to Internet. Files downloaded from the Internet may contain executable code capable of communicating outside the anonymous network: for example, with the proper knowledge, some arbitrary scripting code can be inserted into Word or PDF files, not mentioning, of course, the classic executables available for your operating system (.exe, .dmg, .sh and so on).

6.12 Browser Security Test

Browser Security is a very complex and ever changing topic, and requires an extensive knowledge from multiple fields. Currently, the most complete and reliable tool to test your browser and its security is offered by BrowserSPY[81], allowing to verify the existence, or rather the exposition, of any technology in the browser.

Using this tool is quite simple: each item on the left side of the screen will open a technology summary tab, and a list of values exposed to the network. You must ensure that all the items that may somehow compromise your anonymity are properly hidden, possibly exploring the ones that have not been covered in this document.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.