[tor-bugs] #30532 [- Select a component]: font FP reveals different Windows releases
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sat May 18 21:47:22 UTC 2019
#30532: font FP reveals different Windows releases
--------------------------------+--------------------------------------
Reporter: Thorin | Owner: (none)
Type: defect | Status: new
Priority: Medium | Component: - Select a component
Version: | Severity: Normal
Keywords: tbb-fingerprinting | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------+--------------------------------------
based on Arthur's work [1], I have been looking at the enumerate fonts FP
for TB 8 and 8.5a and various platforms.
[1] https://ghacksuserjs.github.io/TorZillaPrint/TorZillaPrint.html#fonts
^^ just click run tests, and the only test I have actually added is the
one we're concerned about
- Linux distros all seem to be the same - I will test more
- I do not have a Mac, but I do have one result, should anyone like to
contribute, and I don't think Macs would vary
- But I found Windows (so far in three out 3 cases) is revealing the major
version and maybe the architecture. I believe this might be fixed by
looking at the font whitelist, but Windows 10 is a rather drastic change
(at least from Win7).
- I will try and get Win10-32bit, Win8.1 32+64bit results to build a
complete picture of Windows font entropy. **If you can provide it instead
of me trying to find isos and setting up more VMs, then please do**
So here are some results (8.0.9, 8.5a12)
- Win 7 32bit: `9e5d39b4542cd5e2a19f73b8fa566e679fa561e5` (62 fonts)
- Win 7 64bit: `ad4ccd607603041d3e89aa8e03e2e203fc184653` (61 fonts)
- Win8.1 32bit: please help
- Win8.1 64bit: please help
- Win 10 32bit: please help
- win 10 64bit: `1389aaf4c97027b8157c5fb9ef5ed6f141a6b8a1` (36 fonts)
also, FYI
- mint (32/64bit), ubuntu, debian:
`09a4ee037c9082b9b8f0b7ae981c656d517faffa`
- mac 10.14: `4094aedc000205c711385fad32827e60462976dc`
Note that the 1 font difference between Win7 32 and 64 bit is just the
count, there are actually three changes. I will post the font lists for
the three windows results in the next post
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30532>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list