[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #19479 [Applications/Tor Browser]: Document.timeline.currentTime leaks ms-resolution clock in Firefox >=48
#19479: Document.timeline.currentTime leaks ms-resolution clock in Firefox >=48
------------------------------------------+--------------------------
Reporter: arthuredelstein | Owner: rah
Type: defect | Status: accepted
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: ff59-esr, tbb-fingerprinting | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
------------------------------------------+--------------------------
Comment (by rah):
Hi all,
I've created an initial patch, attached. This is following the strategy
described in entry 15, Timing-based Side Channels, of the "Specific
Fingerprinting Defenses in the Tor Browser" list under section 4.6, Cross-
Origin Fingerprinting Unlinkability, of The Design and Implementation of
the Tor Browser:
https://www.torproject.org/projects/torbrowser/design/#fingerprinting-
linkability
The patch is against the tor-browser-52.2.0esr-7.5-1 branch. I've created
a small HTML document for testing, also attached. However, as noted
[comment:3 above], this functionality is only exposed in Firefox Nightly
and the test HTML reports that document.timeline is not defined when run
in the tor-browser branch.
I'm wondering whether there is a simple switch to activate this
functionality in the tor-browser branch? Or is it a matter of the code
not being there yet?
Thanks,
Bob Ham
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19479#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs