[tor-bugs] #31324 [Applications/Tor Browser]: Spoof the Tor Browser time displayed to websites

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#31324: Spoof the Tor Browser time displayed to websites
------------------------------+------------------------------------------
 Reporter:  cypherpunks       |          Owner:  tbb-team
     Type:  enhancement       |         Status:  new
 Priority:  Medium            |      Component:  Applications/Tor Browser
  Version:  Tor: unspecified  |       Severity:  Normal
 Keywords:                    |  Actual Points:
Parent ID:                    |         Points:
 Reviewer:                    |        Sponsor:
------------------------------+------------------------------------------
 Javascript can be used to get the system time of a user. This allows for
 fingerprinting via different clock offsets and skews. This also may allow
 websites to determine the user's location by seeing which country has the
 same time as the user.

 Currently, the Tor Browser spoofs the timezone displayed to websites to
 UTC but this doesn't spoof the actual system time which can still be
 gotten with `new Date()`.

 The Tor Browser should spoof the time shown to websites so all Tor Browser
 users have the same time or a random time.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31324>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs