How sites spot a VPN or a proxy on a Mac: 1 - the address belongs to a data center, not a home provider 2 - the browser says Mac, but a proxy opens the tcp connection itself, so the first packet looks like Linux 3 - a VPN lowers the packet size (MSS). not proof alone, but with a data center address it is 4 - WebRTC shows the real address if the proxy doesn't carry UDP and a bunch of smaller things One exit gets a pass: iCloud Private Relay. Sites see it, Apple publishes the addresses. Most don't block it anyway, because only real Apple devices get on it and it's full of ordinary Safari users. Some do like Wikipedia editing. It can't be faked. Apple only lets its own apps use it. Chrome and Firefox on the same Mac don't get it. Around a hundred thousand IPv4 addresses worldwide, IPv6 is basically unlimited. For a second account it does half the job. It hides the address, but the site still knows you by cookies. You can't pick a country. A VPN on the router fixes that: Relay runs on top and the site only sees Relay, in another country. Clock and language stay yours though, so change those too. I built a checker that shows how a connection looks from the site's side (direct, relay, vpn, proxy) and whether the browser is really Safari: https://check.stealthpilot.app. Mac only for now. About one in three people who ran it in Safari came in through Relay. Has anyone actually used Relay for multiple accounts? And does any proxy provider give you a macOS tcp fingerprint instead of Linux?   submitted by   /u/Objective_Reach_767 [link]   [comments]