[tor-bugs] #22919 [Applications/Tor Browser]: Form tracking and OS fingerprinting (only Windows, but without Javascript)

Wed Oct 16 02:38:27 UTC 2019

#22919: Form tracking and OS fingerprinting (only Windows, but without Javascript)
--------------------------------------+--------------------------
 Reporter:  basvd                     |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:
 Keywords:  tbb-fingerprinting        |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cypherpunks):

 The attached patch uses nsIRandomGenerator, which calls
 PK11_GenerateRandom. It generates more random results than rand() and is
 adapted from an existing comm-central implementation in bug
 https://bugzilla.mozilla.org/show_bug.cgi?id=902580

 Reviewers should note the rand_buf and character count to see if any
 tweaking needs to be done for additional defense.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22919#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online