Bug: Hide user agent still reveals ipad details

[tragicfame]

The User Agent header still shows iOS 5.1.1 and iPad in the string. Anonymity websites do detect the browser as Mozilla, but you can still see traces from the old User-Agent. This would make for easy fingerprinting.

[mtigas]

Hm, the browser (in the 1.1.1 version currently on the App Store) should be sending Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox 5.0 when you click on "Enable UA Spoofing".

I can't reproduce this bug. (See this screenshot I just took, after hitting the "Enable UA Spoofing" button and then loading up a website to check the User-Agent being sent.)

Can you please double-check that UA Spoofing is turned on? (Press "Enable UA Spoofing" first, which shows you a pop-up explaining that it is turned on and some caveats about the spoofing.)

---

I admit that the interface for enabling UA Spoofing is a bit awkward (button reads "Disable UA Spoofing" when it is turned on), but version 1.2.0 that I submitted last week (should be in App Store this week) pulls that out into a separate menu:

 

[tragicfame]

Bows head in shame... I tried again and couldn't reproduce it. It may be possible that when I saw that the first time, they were deriving some information from Javascript. That may be a separate issue. When I tried it today, I received that the ipad was a Winnt 4.0 box running Firefox. Sorry for the false report.