Response variable

Figure 2 shows time series for the period of study. Initial downloads and signature downloads are requests made by the user to download a Tor Browser executable or a corresponding signature file from the Tor website. Update pings and update requests are requests made by Tor Browser to check whether a newer version is available or to download a newer \cite{metrics} version. We chose initial downloads as the target, as it describes the most likely action of new users.