[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #2874 [Tor bundles/installation]: Block or mark Components.interfaces configurable

#2874: Block or mark Components.interfaces configurable
--------------------------------------+-------------------------------------
 Reporter:  mikeperry                 |          Owner:  mikeperry
     Type:  defect                    |         Status:  new      
 Priority:  normal                    |      Milestone:           
Component:  Tor bundles/installation  |        Version:           
 Keywords:                            |         Parent:  #2871    
   Points:                            |   Actualpoints:           
--------------------------------------+-------------------------------------
 Components.interfaces can be used to fingerprint browser user agent down
 to OS and minor version. This might not be a lot of data for
 fingerprinting (depending on how well we keep users upgraded), but it
 certainly is a concern for targeting exploit payloads against a particular
 OS and version combo.

 Here's an (outdated) PoC: http://pseudo-flaw.net/tor/torbutton
 /fingerprint-firefox.html

 Here's the Firefox bug for this:
 https://bugzilla.mozilla.org/show_bug.cgi?id=429070

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2874>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs