[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Firefox sends your uptime

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Firefox sends your uptime
From: Geoffrey Goodell <goodell@xxxxxxxxxxxxxxxx>
Date: Sat, 5 Apr 2008 08:09:58 -0400
Cc: or-talk@xxxxxxxx
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Sat, 05 Apr 2008 08:10:05 -0400
In-reply-to: <47F74DF9.6060909@xxxxxxxxxxxx>
References: <47F74DF9.6060909@xxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx
User-agent: Mutt/1.5.17+20080114 (2008-01-14)

On Sat, Apr 05, 2008 at 02:01:29PM +0400, .FUF wrote:
> Firefox sends your uptime in "gmt_unix_time" field (seconds since boot).
> Other browsers (IE, Opera) send your current system time in UNIX format.

Even sending the current system time is somewhat troublesome, since
small inaccuracies may be likely to remain relatively constant over long
periods, allowing an attacker to observe, for example, which machine is
twenty seconds slow.  Not sure about to what extent running NTP
ameliorates this.

Geoff

Follow-Ups:
- Re: Firefox sends your uptime
  - From: .FUF

References:
- Firefox sends your uptime
  - From: .FUF

Prev by Author: Re: [ot] wikileaks
Next by Author: Re: Ubuntu Tor LiveCD: making your own with Remastersys
Previous by thread: Re: Firefox sends your uptime
Next by thread: Re: Firefox sends your uptime
Index(es):
- Author
- Thread