Silence on the Wire

Prevention of Fingerprinting

Given the complexity of a typical IP stack, it is extremely difficult to prevent fingerprinting in general, but it is possible to address specific issues and disable specific types of known fingerprinting software by determining what parameter it relies on most and then changing it. For example, certain packet-filtering solutions, such as pf in OpenBSD, provide a packet normalization service that ensures that all outgoing traffic “looks the same.” Although this might prevent some aspects of fingerprinting to some degree or might simply make finger-printing more difficult by rendering some popular programs less accurate, it does not solve the problem completely.

Although the thorough and seemingly exhaustive manual or ...