User Agent change in non Linux OS

Recently noticed the user agent in Firefox on OpenBSD shows up as Mozilla/5.0 (X11; Linux x86_64 instead of OpenBSD after upgrading from Firefox 115-esr to 128-esr Apparently this changed sometime ago. Assuming this changed due to compatibility reasons for web devs. Someone filed a bug report for FreeBSD https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277368 which turned out not to be a bug and is as intended to be so. On one hand, this may be good for OPSEC / analyticsSEC as to blend in more with a user base that is larger than BSD and not be too unique on the web see: https://amiunique.org/fingerprints-global-statistics ~23% Linux vs 0.03% BSD based on the nearly 3 million fingerprints collected from the all time chart. On the other, how can I let webmasters, big tech, and glowies know that "I use *BSD BTW"? What say you Lainchan? Will you be changing your UA manually if not using a Linux/Windows machine? Or let it be and erase the BSD waifus from the access log forever?

I want FreeBSD and OpenBSD to bully me uhhh I-I mean...you should be able to change the user agent settings in about:config unless I'm mistaken.

>>25011 >On the other, how can I let webmasters, big tech, and glowies know that "I use *BSD BTW"? I'm sure there are browser extensions that let you change your useragent to whatever you want. >What say you Lainchan? I say you're dumb for worrying about this. >the BSD waifus I like your pic. Since Dragonfly is a rage-fork of Free and Open is a rage-fork of Net the artist could play on that rivalry a bit more.

Is there any actual way to hide your operating system info from a browser? I'm aware that disabling javascript a site can only read the user agent but with javascript enabled they can see the real os.

>navigator object >Block access to the navigator object which idk why any browser hasn't implemented this >tried this in uBlock Origin: *##script:has(navigator) *##script:has-text(navigator) >goes to https://www.deviceinfo.me >True Operating System Core: Linux x86_64 >>There is no foolproof way to completely block all access without potentially breaking many websites. The navigator object is a fundamental part of the web API, and many scripts may access it in ways that are not easily blocked by filters.

>>25020 VM is the easy braindead option if you merely want to hide os&hardware. Assuming you trust browser and want to hide from the site you can also rely on browser extensions. Browser extension can apparently redefine js api calls requesting OS information with custom return values. I've seen some projects like this on pale moon but admittedly nothing with full coverage of all possible calls.

I just use my real IP for regular web browsing, so if somebody looks at his server logs and sees me, he probably can identify me without much effort anyway, therefor it's probably futile to try and change my user agent. I use NetBSD and NetBSD's Firefox still ships with it's own user agent, and I would be glad if the NetBSD people keep it that way. Mozilla/5.0 (X11; NetBSD x86_64; rv:129.0) Gecko/20100101 Firefox/129.0

>>25147 >I use NetBSD Why not use Solaris or Plan9?

>>25157 I simply don't like the ideas behind Plan9 and Solaris. I haven't used either of them very much, but for Plan9 I just don't like the idea of distributed computing and using networking for everything. Also I don't think an OS should require you to use a mouse and GUI (which Plan9 does as far as I can tell). On top of that, none of my hardware is supported. As great and less harmful it might be, I just cannot make myself like the core ideas behind it. Regarding Solaris, I don't know much about it. I know some people regard it as the true Unix, but that has been said about every Unix-like ever made, and personally I think NetBSD is a better fit for that. Personally I like NetBSD and don't think I need any other OS, in particular Solaris or Plan9. I hope this answers your question.

>>25011 >On the other, how can I let webmasters, big tech, and glowies know that "I use *BSD BTW"? You don't. Even though the Firefox devs often justify changes with user data, they transparently use this bullshit as an excuse to keep tailing Chrome. While the BSDs don't have any hidden agenda, their projects continue well-defined legacies, they have various corporate sponsors and most importantly they know their users, no usage statistics needed. >>25192 >I don't think an OS should require you to use a mouse and GUI Not using the gui programs means missing out on half the fun, but plan9 also has many solid continuations of unix software and novel additions (rc being a standout). Ever felt like you were missing some troff utilities or wanted zip/unzip with tar-like flags? Give plan9port a try!

>>25022 >Linux x86_64 go to about:config set general.oscpu.override to Windows NT 10.0; Win64; x64 install user agent switcher extension set UA to Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0 clear all history go back to https://www.deviceinfo.me post screenshot enjoy blending in

>>26521 >blending in great, now the remote end sees a machine that identifies as Windows, but can still be fingerprinted via TCP/IP stack fingerprinting as Linux, making your fingerprint even MORE unique.

>>26522 https://www.usenix.org/legacy/events/sec00/full_papers/smart/smart_html/index.html It was possible over 20 years ago, and it certainly still is. I'm just too lazy to do it

>>26526 is there not a rule that bans ai slop from this platform??

>>26521 >set general.oscpu.override to Windows NT 10.0; Win64; x64 >go back to https://www.deviceinfo.me That doesn't fool https://coveryourtracks.eff.org so it probably doesn't fool anybody who is serious about tracking you either.

>>26535 my bad, forgot to also tell you to set general.platform.override to Win32 or whatever else https://developer.mozilla.org/en-US/docs/Web/API/Navigator/platform now clear you history (all), and try here https://coveryourtracks.eff.org/ https://amiunique.org/fingerprint https://browserleaks.com/javascript https://www.deviceinfo.me/ https://fingerprint.com/ (toggle "I am a developer", and read the last lines of the JSON) https://tecadmin.net/demo/javascript-detect-os.html you can also just make a fresh profile in about:profiles

>>26537 >my bad, forgot to also tell you to set ... That's pretty much the point isn't it. You forget to set a thing or they add a new thing or the take a thing away and now your attempts to blend in make you even more unique than if you had just left it alone.

>>26538 >complaint about me, not the result So, I assume it worked on your end? >they add a new thing or the take a thing away These are deprecated, and in ideal world would have been replaced by the user agent string alone. Unfortunately, the web is a constantly "evolving" medium, which means that we just have to keep up >your attempts to blend in make you even more unique than if you had just left it alone. It's not only about blending in. I used windows as an example, but you could set it to mac, or android even. The point is control. It is my unalienable right to be able to control what my client sends, receives, and what it reveals. I can burn this identity and create a new one, unique enough for https://fingerprint.com/ to say that I am a new visitor, in ~2 minutes. Trying to identify people without their consent, how perverted, how disgusting...

>>26539 >complaint about me, not the result Nobody is attacking you personally you soyboy snowflake commie homo. >So, I assume it worked on your end? Yes it worked for the top 2 sites. That's not a guarantee that cloudflare or google analytics don't know about a secret 3rd way to detect your real OS and are now tracking you across half the internet. >general.oscpu.override = win32 >general.platform.override = win32 >secret unknown value = linux this would make you fully unique instead of one out of a few thousand linux users if you had just left the default >Unfortunately, the web is a constantly "evolving" medium, which means that we just have to keep up. And how much effort will you put into "keeping up"? Knowing that you have no way of knowing if you've fuarrrked up or how long you've been fuarrrking up. >The point is control. It is my unalienable right to be able to control what my client sends, receives, and what it reveals. That's probably not possible even if you write your own web browser by scratch. As long as you are automatically downloading and running arbitrary javascript code from websites you visit then you have no way of fully controlling what data it will find. Especially when you factor in hardware attacks like rowhammer or meltdown. >I can burn this identity and create a new one, unique enough for https://fingerprint.com/ to say that I am a new visitor, in ~2 minutes. Trying to identify people without their consent, how perverted, how disgusting... Well good luck with that I guess. This sounds more like a hobby for you than a legit opsec concern.

>>26540 >you soyboy snowflake commie homo. poltard gets butthurt he was wrong and lashes out; how original >3rd way to detect your real OS TCP packets. Yes, cloudflare does track those >And how much effort will you put into "keeping up"? I get paid to do so, so I'm putting in the effort, for now >. As long as you are automatically downloading and running arbitrary javascript code from websites you visit I know, which is why, using Ublock Origin, I only enable JS for certain websites, including this one. what else Dr Genius? >This sounds more like a hobby I was giving you an example you'd understand you tech illiterate midwit

>>26541 I'll drop the fake hostility since you seem to be genuinely upset. >TCP packets. Yes, cloudflare does track those If you're not using a proxy then they can just track your IP address. If you're using a proxy then those are the proxy's TCP packets not yours. I meant within the browser though. Modern web browsers are basically operating systems they contain millions and millions lines of code doing lain knows what. It's cool that you found these two override options that Mozilla exposed but who knows how many more ways there are for sneaky javascript code to expose your real OS. >I get paid to do so Hard to imagine why that would be. >I was giving you an example you'd understand Well the joke's on you because I don't understand. So you don't want to be anonymous you want to pretend to be different people? >look at me i'm windows 7 >press a button >woooosh now I'm android 9 but why though? If it's not a hobby then this only seems useful for samefаgging. Are you running a selenium grid spamming political propaganda and you don't want the admins to know all the posts are the same person?

>>26542 >Modern web browsers are basically operating systems Yeah, unfortunately neither windows, mac, nor linux won the desktop war. the browser did >Hard to imagine why that would be Automation. I'll leave it at that >Are you running a selenium grid spamming political propaganda haha, no; me? I would never, nooo ;) You seem to understand perfectly I research these things not only for business reasons, but also because I slowly became convinced that unrequested mass surveillance is a crime against the human soul. So, you're right it has become somewhat of a hobby. I oppose to the practices of data collection and sale mainly because I don't get paid for said data, so I try give away as little as little as possible, which also means sometimes lying about aspects of the software I use. Strangely enough, I can only do that in a browser, but I don't have to anywhere else: whatsapp? That's an account, can't access the service without logging in qbittorrent and nicotine? My country doesn't care about piracy, but I could use a VPN cartero? I write the whole request myself network monitoring tools? local download managers? I'm just requesting to files, again I can hide behind a VPN or proxy Everything either asks upfront for identification (like email clients, social media apps), or doesn't; all except the web

>>26537 https://abrahamjuliot.github.io/creepjs/tests/workers.html https://abrahamjuliot.github.io/creepjs/tests/iframes.html Now what, big girl? Whatchu gonna do?