#19479: Document.timeline.currentTime leaks ms-resolution clock in Firefox >=48 ------------------------------------------+-------------------------- Reporter: arthuredelstein | Owner: rah Type: defect | Status: accepted Priority: Medium | Milestone: Component: Applications/Tor Browser | Version: Severity: Normal | Resolution: Keywords: ff59-esr, tbb-fingerprinting | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: ------------------------------------------+--------------------------
Comment (by rah): Hi all, I've created an initial patch, attached. This is following the strategy described in entry 15, Timing-based Side Channels, of the "Specific Fingerprinting Defenses in the Tor Browser" list under section 4.6, Cross- Origin Fingerprinting Unlinkability, of The Design and Implementation of the Tor Browser: https://www.torproject.org/projects/torbrowser/design/#fingerprinting- linkability The patch is against the tor-browser-52.2.0esr-7.5-1 branch. I've created a small HTML document for testing, also attached. However, as noted [comment:3 above], this functionality is only exposed in Firefox Nightly and the test HTML reports that document.timeline is not defined when run in the tor-browser branch. I'm wondering whether there is a simple switch to activate this functionality in the tor-browser branch? Or is it a matter of the code not being there yet? Thanks, Bob Ham -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19479#comment:7> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs