[tor-bugs] #16625 [Tor Browser]: Verify network predictor doesn't introduce linkability

Tue Jul 21 03:22:05 UTC 2015

#16625: Verify network predictor doesn't introduce linkability
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:  tbb-
     Type:  defect                               |  team
 Priority:  normal                               |         Status:  new
Component:  Tor Browser                          |      Milestone:
 Keywords:  tbb-linkability, tbb-5.0a4,          |        Version:
  ff38-esr, TorBrowserTeam201507                 |  Actual Points:
Parent ID:                                       |         Points:
-------------------------------------------------+-------------------------
 The network predictor (formerly called 'seer') makes preemptive
 connections to resources in a page based on cached information. It can
 also do the same when the user hovers over a link.

 We should verify that this thing does not actually make full HTTP requests
 during the hover prefetch, as that could be a linkability issue. The
 preemptive connections to resources may also subvert our SOCKS
 username+password isolation.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16625>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online