[tbb-bugs] #18450 [Tor Browser]: JavaScript can reveal the OS.
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Feb 29 17:15:00 UTC 2016
#18450: JavaScript can reveal the OS.
-------------------------+--------------------------
Reporter: cypherpunks | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Sponsor: |
-------------------------+--------------------------
Comment (by cypherpunks):
Currently, there are several ways to detect the platform. No Javascript is
required.
The font sets/whitelisted fonts are different. TBB uses the native font
rendering engine - different for each platform. The UI controls are
different (things like scrollbars, checkboxes, input fields). These
differences can all be detected with CSS, no Javascript required.
Keyboard events are different. Resources (resource:// URIs can be be used
to access various local resources) are different - that's what
Browserleaks is using.
There likely is more stuff.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18450#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list