[tor-bugs] #15646 [Tor Browser]: KeyboardEvent may allow fingerprinting of keyboard layout

[Tor Bug Tracker & Wiki]

#15646: KeyboardEvent may allow fingerprinting of keyboard layout
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  arthuredelstein
  cypherpunks            |     Status:  assigned
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  ff38-esr, tbb-fingerprinting, tbb-5
  Browser                |  .0a-highrisk, TorBrowserTeam201506
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by arthuredelstein):

 It turns out that not only does the new property, `KeyboardEvent.code`,
 allow fingerprinting of keyboard layout, so does the old (deprecated but
 still retained) `KeyboardEvent.keyCode`. For example, here are `keyCode`
 values I get for the `?` character, for layouts targeted to different
 languages on OS X:

 || English (US) || 191 ||
 || German || 63 ||
 || French || 188 ||
 || Spanish || 190 ||
 || Italian || 222 ||
 || Swedish || 171 ||

 So I'm looking into how to create a map from commonly typed unicode
 characters to a consensus `code` and a consensus`keyCode`.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15646#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online