[tor-bugs] #13019 [Tor Browser]: New locale fingerprinting capabilities in FF31ESR

[Tor Bug Tracker & Wiki]

#13019: New locale fingerprinting capabilities in FF31ESR
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  arthuredelstein
  mikeperry              |     Status:  needs_revision
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  ff31-esr, tbb-fingerprinting,
  Browser                |  TorBrowserTeam201503, tbb-4.5-alpha
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by arthuredelstein):

 Replying to [comment:29 gk]:
 > Setting `javascript.use_us_english_locale` to `false` does not change
 anything wrt to the differing date formats (at least not on OS X nor on
 Linux; I currently don't have an en-US Windows available to test).

 I just tested it on OS X, and it is working for me. However, if you are
 running Tor Browser from the command line, it is necessary to make sure
 that the shell locale is set to something other than English.

 I did the following:
 {{{
 bash-3.2$ locale
 LANG="en_US.UTF-8"
 LC_COLLATE="en_US.UTF-8"
 LC_CTYPE="UTF-8"
 LC_MESSAGES="en_US.UTF-8"
 LC_MONETARY="en_US.UTF-8"
 LC_NUMERIC="en_US.UTF-8"
 LC_TIME="en_US.UTF-8"
 LC_ALL=
 bash-3.2$ export LC_ALL="de_DE"
 bash-3.2$ locale
 LANG="en_US.UTF-8"
 LC_COLLATE="de_DE"
 LC_CTYPE="de_DE"
 LC_MESSAGES="de_DE"
 LC_MONETARY="de_DE"
 LC_NUMERIC="de_DE"
 LC_TIME="de_DE"
 LC_ALL="de_DE"
 bash-3.2$ ./mach run
  0:00.42 /projects/torproject/tor-browser31/obj-x86_64-apple-
 darwin13.4.0/dist/Nightly.app/Contents/MacOS/firefox -no-remote
 -foreground
 }}}

 Then in the JavaScript console:

 {{{
 // set pref to true
 new Date().toLocaleFormat()
 --> "Thu Mar 26 10:31:21 2015"
 // set pref to false
 new Date().toLocaleFormat()
 --> "Do 26 Mär 10:31:38 2015"

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13019#comment:30>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online