Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use Tor Browser's User Agent #3136

Closed
mehlon opened this issue Feb 23, 2020 · 8 comments
Closed

Use Tor Browser's User Agent #3136

mehlon opened this issue Feb 23, 2020 · 8 comments
Labels
feature request Issue is related to a feature in the app privacy & data protection Issues regarding either NewPipe, Team NewPipe services or external services NewPipe uses

Comments

@mehlon
Copy link

mehlon commented Feb 23, 2020

In order to protect user privacy and resist browser fingerprinting, the Tor Browser uses a single user agent string for all users regardless of platform or version. I think it makes sense to use whatever user agent the Tor Browser uses in NewPipe as well, since it lets users blend in more, especially if they use Orbot to connect (#1129).

@gkeegan
Copy link
Contributor

gkeegan commented Feb 23, 2020

Would this cause any more captchas?

@mehlon
Copy link
Author

mehlon commented Feb 23, 2020

I don't get any reCAPTCHA prompts when accessing YouTube from the Tor Browser.
So I think not. Especially since Tor Browser has a very generic user agent that tends to line up with the latest Firefox ESR on Windows 10:
Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0

@Poolitzer
Copy link
Member

Poolitzer commented Feb 25, 2020

But with your request to change the user agent won't really help. People can't use Tors user agent unless they already use Orbot as that wouldnt really make any sense.

Uhm yes they can? You can actually set your own user agent in a lot of browsers. And what @mehlon suggested makes sense. It would blend in with the TOR users and be less traceable if the current agent is smth more specific to an/this android application. Its a nice feature privacy wise

Would this cause any more captchas?

@gkeegan they will be mostly based on IPs and cookies and how you access the web. I dont think they will discriminate (much) based on agents, because they are so simple to change. But its a black box, we dont know.

@Poolitzer
Copy link
Member

Yes, I am vastly uneducated, first one to admit it.

I think OPs idea was to use the same agent as tor, because it is a) an agent which doesnt give away much and b) would be more wildly used so you cant identify NewPipe users based on it. As I have learned from NewPipeExctractor#258 though we apparently need to send a specific one to request json we can work with anyway, sooo....

@ghost
Copy link

ghost commented Feb 25, 2020

I am an expert on this topic, and I propose this user-agent string: "W3C standards are important. Stop fucking obsessing over user-agent already."
See this article from almost 20 years ago: http://linuxmafia.com/faq/Web/user-agent-string.html

What in the world would that provide any type of anonymity?!?!?!?!?!?!? Explain pls.

Nobody is talking about anonymity.

But with your request to change the user agent won't really help. People can't use Tors user agent unless they already use Orbot as that wouldnt really make any sense. It would just be stupid.

So everyone using Firefox 68 on WinNT 10 is just stupid.

@wb9688
Copy link
Contributor

wb9688 commented Feb 26, 2020

@Poolitzer: We don't need a specific one, we need one that's recent enough, so that YouTube will serve their new site. Or in versions earlier than v0.18.5, we need one that's old enough for them to serve their old site.

Also, as of v0.18.5, we're using the UA of Firefox 68 on Windows 10. We're doing that as Windows 10 is the most common OS and Firefox 68 is a ESR release, so we don't need to change our UA as often. Coincidentally, that's the same thing Tor Browser thought. We might add an option to change the UA if we decide to add miscellaneous settings, see the discussion about that in #2998.

@KonoromiHimaries
Copy link

KonoromiHimaries commented Feb 26, 2020

cdn is like a better chose #1435 (comment) of course, it can be used together with tor

@Stypox Stypox added the feature request Issue is related to a feature in the app label Mar 8, 2020
This was referenced Aug 15, 2020
@Stypox Stypox added the privacy & data protection Issues regarding either NewPipe, Team NewPipe services or external services NewPipe uses label Dec 17, 2020
@litetex
Copy link
Member

litetex commented Aug 25, 2021

In order to protect user privacy and resist browser fingerprinting, the Tor Browser uses a single user agent string for all users regardless of platform or version.

This is already done in

public static final String USER_AGENT
= "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0";

This issues is very likely outdated.
Closing it for now.

@litetex litetex closed this as completed Aug 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature request Issue is related to a feature in the app privacy & data protection Issues regarding either NewPipe, Team NewPipe services or external services NewPipe uses
Projects
None yet
Development

No branches or pull requests

8 participants
@KonoromiHimaries @mehlon @Poolitzer @gkeegan @Stypox @litetex @wb9688 and others