[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #30862 [Applications/Tor Browser]: 10ms time precision via EXSLT date-time function
#30862: 10ms time precision via EXSLT date-time function
------------------------------------------+--------------------------------
Reporter: gk | Owner: tbb-team
Type: defect | Status: new
Priority: High | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Keywords: tbb-fingerprinting
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------------------+--------------------------------
z3t reported at HackerOne that the EXSLT date-tme function is subverting
our patches that set the timing granularity to 100ms. We get at least a
10ms precision that way. PoC is on
https://people.torproject.org/~gk/tests/tor_xml_time.html. And see
dom/xslt/xslt/txEXSLTFunctions.cpp for the `date:date-time`
implementation.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30862>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs