LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-04-2015, 09:46 AM   #1
Ulysses_
Senior Member
 
Registered: Jul 2009
Posts: 1,303

Rep: Reputation: 57
Fingerprints left by wget


What are some of the fingerprints left when you download a web page with wget or post a comment with wget?
 
Old 04-04-2015, 10:21 AM   #2
estabroo
Senior Member
 
Registered: Jun 2008
Distribution: debian, ubuntu, sidux
Posts: 1,126
Blog Entries: 2

Rep: Reputation: 124Reputation: 124
The user-agent string would definitely be one.
 
Old 04-04-2015, 10:26 AM   #3
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
Your IP address will be recorded also together with what wget reqested .
 
Old 04-04-2015, 02:14 PM   #4
John VV
LQ Muse
 
Registered: Aug 2005
Location: A2 area Mi.
Posts: 17,624

Rep: Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651
Quote:
What are some of the fingerprints left when you download a web page with wget or post a comment with wget?
sounds a bit like homework ?
 
Old 04-04-2015, 04:28 PM   #5
Ulysses_
Senior Member
 
Registered: Jul 2009
Posts: 1,303

Original Poster
Rep: Reputation: 57
It's not. Just want to know if using wget instead of a browser might be a decent defence against fingerprint tracking. Pages would then be viewed offline with a browser.

Last edited by Ulysses_; 04-04-2015 at 04:30 PM.
 
Old 04-04-2015, 04:32 PM   #6
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
Quote:
Originally Posted by Ulysses_ View Post
It's not. Just want to know if using wget instead of a browser might be a decent defence against fingerprint tracking. Pages would then be viewed offline with a browser.
Don't bother -- your IP address is unique enough for the short term and your use of wget will be enough in the long term. If you access data on another machine the owner of that machine will know a lot about your computer and there's not much you can do to stop that.
 
Old 04-04-2015, 11:08 PM   #7
veerain
Senior Member
 
Registered: Mar 2005
Location: Earth bound to Helios
Distribution: Custom
Posts: 2,524

Rep: Reputation: 319Reputation: 319Reputation: 319Reputation: 319
You can reduce tracking but not completely.

Use TOR instead for anonymising.
 
Old 04-04-2015, 11:23 PM   #8
Sefyir
Member
 
Registered: Mar 2015
Distribution: Linux Mint
Posts: 634

Rep: Reputation: 316Reputation: 316Reputation: 316Reputation: 316
You can also use a vpn to camouflage your ip address.
Run this command to see what your ip address is.

Code:
curl myexternalip.com/raw
 
Old 04-05-2015, 04:11 AM   #9
Ulysses_
Senior Member
 
Registered: Jul 2009
Posts: 1,303

Original Poster
Rep: Reputation: 57
Maybe a script could be written that changes the user agent in every session. If we know all the fingerprints wget leaves, we can probably deal with each one appropriately, eg with TOR etc. But we cannot do this with a full featured browser, unless it is crippled to do no more than wget.
 
Old 04-05-2015, 04:28 AM   #10
veerain
Senior Member
 
Registered: Mar 2005
Location: Earth bound to Helios
Distribution: Custom
Posts: 2,524

Rep: Reputation: 319Reputation: 319Reputation: 319Reputation: 319
You can change user-agent in every invocation of wget. Using curl would be better.

I read someone using curl to view webpages together with lynx web browser.
 
Old 04-05-2015, 06:17 AM   #11
Ulysses_
Senior Member
 
Registered: Jul 2009
Posts: 1,303

Original Poster
Rep: Reputation: 57
Probably better to change it once per session, not per invocation, so it looks like thousands of others using a browser with scripts disabled.
 
Old 04-05-2015, 09:05 AM   #12
ntubski
Senior Member
 
Registered: Nov 2005
Distribution: Debian, Arch
Posts: 3,780

Rep: Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081
Quote:
Originally Posted by veerain View Post
You can change user-agent in every invocation of wget. Using curl would be better.
What's the advantage of curl over wget in this context?
 
Old 04-05-2015, 09:16 AM   #13
veerain
Senior Member
 
Registered: Mar 2005
Location: Earth bound to Helios
Distribution: Custom
Posts: 2,524

Rep: Reputation: 319Reputation: 319Reputation: 319Reputation: 319
Quote:
Originally Posted by ntubski View Post
What's the advantage of curl over wget in this context?
It has better http support plus many other featues. And it's a library/program to specifically do these kind of things.
 
Old 04-05-2015, 12:15 PM   #14
ntubski
Senior Member
 
Registered: Nov 2005
Distribution: Debian, Arch
Posts: 3,780

Rep: Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081Reputation: 2081
Quote:
Originally Posted by veerain View Post
It has better http support plus many other featues. And it's a library/program to specifically do these kind of things.
I was hoping you might a bit more specific. Looking at curl vs wget comparison (written by the curl author), it seems that wget's recursive download feature might tip the balance in its favour for this case (since you usually want to look at many pages on a site).
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Why does SSH store the fingerprints of remote host when connecting for the first time ListenAndLearn Linux - Newbie 11 08-17-2014 01:00 PM
LXer: How Linux reads your fingerprints, helps national security LXer Syndicated Linux News 0 12-25-2012 01:00 PM
[SOLVED] Location of SSL Host key fingerprints zama Linux - Software 3 08-06-2012 02:04 AM
A question about rsa host key fingerprints lawrence_lee_lee Linux - Software 8 07-17-2008 09:58 PM
Multiple ssh tunnels and bad key fingerprints theNbomr Linux - Networking 2 06-14-2008 08:15 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:31 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration