#30800: ftp:// on Windows can be used to leak the system time zone ------------------------------------------+-------------------------------- Reporter: gk | Owner: tbb-team Type: defect | Status: new Priority: High | Milestone: Component: Applications/Tor Browser | Version: Severity: Normal | Keywords: tbb-fingerprinting Actual Points: | Parent ID: Points: | Reviewer: Sponsor: | ------------------------------------------+-------------------------------- z3t reported via HackerOne that the system time zone on Windows can get leaked by using ftp://. {{{ When using the ftp:// protocol, directory listings contain timestamps converted to the system timezone.. These timestamps can be extracted by a script on a same-origin FTP hosted HTML page, allowing detection of a user's system timezone. }}}
-- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30800> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs