[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #13017 [Applications/Tor Browser]: Determine if AudioBuffers/OfflineAudioContext are a fingerprinting vector



#13017: Determine if AudioBuffers/OfflineAudioContext are a fingerprinting vector
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:
                                                 |  arthuredelstein
     Type:  task                                 |         Status:
                                                 |  assigned
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Critical                             |     Resolution:
 Keywords:  tbb-fingerprinting-os,               |  Actual Points:
  TorBrowserTeam201608                           |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by qSKvY):

 I run browserprint.info which has these tests on it and can confirm that
 the tests appear to be stable among regular browsers.
 We looked at sets of multiple fingerprints that were made by the same
 browser.
 We found that "Fingerprint using DynamicsCompressor (sum of buffer
 values):", "Fingerprint using DynamicsCompressor (hash of full buffer):",
 and "AudioContext properties:" where very stable (between 1 and 10
 instances out of ~500 of them changing between fingerprints).
 The other two were less stable but the majority of the time they were
 consistent (56 and 87 instances of them changing between fingerprints out
 of ~500).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13017#comment:34>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs