[tbb-bugs] #18450 [Tor Browser]: JavaScript can reveal the OS.

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Feb 29 17:15:00 UTC 2016

#18450: JavaScript can reveal the OS.
 Reporter:  cypherpunks  |          Owner:  tbb-team
     Type:  defect       |         Status:  new
 Priority:  Medium       |      Milestone:
Component:  Tor Browser  |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
  Sponsor:               |

Comment (by cypherpunks):

 Currently, there are several ways to detect the platform. No Javascript is

 The font sets/whitelisted fonts are different. TBB uses the native font
 rendering engine - different for each platform. The UI controls are
 different (things like scrollbars, checkboxes, input fields). These
 differences can all be detected with CSS, no Javascript required.

 Keyboard events are different. Resources (resource:// URIs can be be used
 to access various local resources) are different - that's what
 Browserleaks is using.

 There likely is more stuff.

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18450#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tbb-bugs mailing list