[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #31512 [Applications/Tor Browser]: Fingerprinting of Tor Browser
#31512: Fingerprinting of Tor Browser
--------------------------------------+--------------------------
Reporter: thelamper | Owner: tbb-team
Type: enhancement | Status: closed
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Major | Resolution: invalid
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+--------------------------
Comment (by Thorin):
https://thorin-oakenpants.github.io/testing/debugtriop.html
The fingerprints differ per OS due to a few navigator properties (which we
did deliberately). That's all. The above link breaks down both FP's
The ChkTorButton function no longer works for two reasons:
- the resource being checked no longer exists
- Synchronous XMLHttpRequest on the main thread is deprecated anyway
All the rest on the original PoC is based on the fingerprint, which
includes the ChkTorButton value: and this is broken now: returning a
`NetworkError`. Even if it wasn't broken, the fingerprints don't leak
anything except OS: which ... see previous post
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31512#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs