[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #17412 [Tor Browser]: High-precision timestamps in JS

#17412: High-precision timestamps in JS
---------------------------------------------+--------------------------
 Reporter:  arthuredelstein                  |          Owner:  tbb-team
     Type:  defect                           |         Status:  new
 Priority:  Medium                           |      Milestone:
Component:  Tor Browser                      |        Version:
 Severity:  Normal                           |     Resolution:
 Keywords:  tbb-fingerprinting-time-highres  |  Actual Points:
Parent ID:                                   |         Points:
  Sponsor:                                   |
---------------------------------------------+--------------------------

Comment (by lhansen):

 Replying to [comment:2 gk]:
 > Replying to [comment:1 lhansen]:
 > > Adding jitter to the high-resolution timers such as performance.now in
 addition to reducing its resolution will probably be a good start.
 >
 > That's already done by us in #1517. Note, however that this does not
 seem to be enough. We have #16110 for the remaining issues.

 Ah, helpful.  Thanks.

 > I wonder if we should just dupe this one over to to it.

 I've no direct opinion on that but want to point out that the "clocks"
 created by counting in shared memory probably need not depend on any kind
 of actual time source, at least not for some kinds of attacks, and so will
 need a separate kind of mitigation, as discussed above.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17412#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs