Re: [tor-bugs] #22919 [Applications/Tor Browser]: Form tracking and OS fingerprinting (only Windows, but without Javascript)

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#22919: Form tracking and OS fingerprinting (only Windows, but without Javascript)
-------------------------------------------------+-------------------------
 Reporter:  basvd                                |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_revision
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  tbb-fingerprinting,                  |  Actual Points:
  TorBrowserTeam201910                           |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by acat):

 Replying to [comment:6 tom]:
 > I don't believe GenerateRandomSeed is available outside of the js
 engine.  But you're right about the bits
 Right, and it uses `PRMJ_Now()` which is also only in `js`.

 We could maybe have a local version of `js::GenerateRandomSeed()`?
 Changing `PRMJ_Now()` -> `PR_Now()` and maybe using the same `srand/rand`
 fallback as in the patch? I think the resulting code is simpler than the
 one using `@mozilla.org/security/random-generator;1` (assuming both have
 similar security, speed and availability).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22919#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs