[tor-bugs] #17009 [Tor Browser]: Shift and Alt keys leak physical Keyboard layout

[Tor Bug Tracker & Wiki]

#17009: Shift and Alt keys leak physical Keyboard layout
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  tbb-team
  arthuredelstein        |     Status:  needs_revision
         Type:  defect   |  Milestone:
     Priority:  normal   |    Version:
    Component:  Tor      |   Keywords:  tbb-fingerprinting,
  Browser                |  TorBrowserTeam201509
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------
Changes (by arthuredelstein):

 * keywords:  tbb-fingerprinting, TorBrowserTeam201509R => tbb-
     fingerprinting, TorBrowserTeam201509
 * status:  needs_review => needs_revision


Comment:

 Replying to [comment:7 cypherpunks]:
 > You should also include "AltGraph" (language/keyboard specific):
 > https://en.wikipedia.org/wiki/AltGr_key

 Good point -- I will suppress events like `{ key: "AltGraph" }` on the
 next iteration in this ticket.

 > as well as "Meta" and "OS" (OS specific).

 I'm not sure about these. Suppose the user presses a key combination like
 Meta+A (Select-All on OS X). Then there will first be a `{ key: "Meta" }`
 keydown event, followed by an `{ key: "A", metaKey: true }` keydown event
 (followed by more events with redundant information). This reveals the
 platform (OS X), but not much else as far as I can tell. Or am I missing
 something?

 (Here's a page for testing:
 https://arthuredelstein.github.io/tordemos/keyboard.html)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17009#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online