[tbb-bugs] #13400 [Tor Browser]: Canvas Fingerprinting: fonts

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Nov 28 13:29:55 UTC 2015


#13400: Canvas Fingerprinting: fonts
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks                          |          Owner:  tbb-
     Type:  defect                               |  team
 Priority:  High                                 |         Status:
Component:  Tor Browser                          |  needs_information
 Severity:  Normal                               |      Milestone:
 Keywords:  tbb-testcase, tbb-fingerprinting-    |        Version:
  fonts                                          |     Resolution:
Parent ID:                                       |  Actual Points:
  Sponsor:                                       |         Points:
-------------------------------------------------+-------------------------

Comment (by cypherpunks):

 >Hi cypherpunks
 My nickname is KOLANICH, I just used cypherpunks shared account. Please,
 use the issues of the repo (https://github.com/KOLANICH/Article-2015-Dull-
 captaincy-or-the-way-Tor-Project-fights-browser-fingerprinting/issues),
 because I dont visit this bug tracker often. Also, you can test
 yourselves, just clone (or download) the repo and open fingerprinter.html.
 PRs are also welcome.

 >your technique
 The technique is not mine, I've only found a flaw in the defence and
 modified the technique from the paper [MS12]. PS the fingerprinter in th

 >can you try your technique against the bundles 4.0
 >against 5.5a1? ​https://blog.torproject.org/blog/tor-browser-
 55a1-released. It uses standardized fonts that should defend against this
 fingerprinting vector.
 Tested aganst 5.5a1.

 Doesn't defend.

 https://github.com/KOLANICH/Article-2015-Dull-captaincy-or-the-way-Tor-
 Project-fights-browser-
 fingerprinting/blob/master/results/KOLANICH/TBB%2C%20TAILS%2C%20Whonix/TBB%205.5a4%20%40%20Win%20XP.json

 https://github.com/KOLANICH/Article-2015-Dull-captaincy-or-the-way-Tor-
 Project-fights-browser-
 fingerprinting/blob/master/results/KOLANICH/TBB%2C%20TAILS%2C%20Whonix/TBB%205.5a4%20%40%20Win%208.1.json

 https://github.com/KOLANICH/Article-2015-Dull-captaincy-or-the-way-Tor-
 Project-fights-browser-
 fingerprinting/blob/master/results/KOLANICH/TBB%2C%20TAILS%2C%20Whonix/TBB%205.5a4%20%40%20TAILS.json

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13400#comment:17>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list