[Privoxy-users] Tor Browser and Privoxy

[Rubén Llorente]

In gmane.comp.web.privoxy.user Patrick Schleizer <patrick-mailinglists at whonix.org> wrote:
> And if filtering in Privoxy is disabled, how could Privoxy make Tor
> Browser easier to fingerprint?

It makes your browser behave in a different way than thousands of Tor Browsers that
are being used with exactly the same configuration. It makes you stand out of
that crowd. However, I doubt it would be a dangerous problem in practice. 

> But what in case when using Tor Browser in combination with another
> proxifier for example lets say I2P? Perhaps I2P is already torified
> (using Whonix or so). That would still be better than using a
> non-privacy optimized browser such as Firefox?

The i2p crowd frowns on users that access the i2p network using Tor.

> Perhaps this can be disabled? Or is disabled by default?

I think login can be disabled, but it should only be a privacy concern in case
your logs are stolen. If your threat model includes an adversary that can steal
your equipment, removing the logs is not the first thing you should do as a
mitigation. Using FDE, Live CD such as Tails and a .38 revolver near the
computer come to mind.

-- 
OpenPGP Key Fingerprint:
BB5A C2A2 2CAD ACB7 D50D  C081 1DB9 6FC4 5AB7 92FA