[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #10703 [TorBrowserButton]: Fallback charset enables fingerprinting of bundle localization

#10703: Fallback charset enables fingerprinting of bundle localization
----------------------------------+--------------------------------
     Reporter:  dcf               |      Owner:  mikeperry
         Type:  defect            |     Status:  needs_review
     Priority:  normal            |  Milestone:
    Component:  TorBrowserButton  |    Version:
   Resolution:                    |   Keywords:  tbb-fingerprinting
Actual Points:                    |  Parent ID:
       Points:                    |
----------------------------------+--------------------------------

Comment (by dcf):

 Replying to [ticket:10703 dcf]:
 > JavaScript in the HTML measures the size of the rendered characters.

 Actually it's even easier than measuring the size. You can look at the
 `innerHTML` and get a string with exactly the decoded characters in it.
 Here is what `encodeURIComponent(elem.innerHTML)` looks like for the
 example sequence "\xc3\a3":
  * utf-8: Ã %C3%A3
  * iso-8859-1: ÃÂ %C3%83%C2%A3
  * iso-8859-2: ÄÅ %C4%82%C5%81
  * windows-1251: ÐÐ %D0%93%D0%88
  * euc-kr: ì %EC%B0%BE
  * gbk: è %E8%8C%AB

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10703#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs