[tbb-bugs] #20214 [Applications/Tor Browser]: Ultrasound Cross Device Tracking techniques could be used to launch deanonymization attacks against some users

[Tor Bug Tracker & Wiki]

#20214: Ultrasound Cross Device Tracking techniques could be used to launch
deanonymization attacks against some users
--------------------------------------+-----------------------------------
 Reporter:  VasiliosMavroudis         |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by VasiliosMavroudis):

 There are various ways to do it using HTML5/JS.

 Two that come to mind (and I've tried myself) are:

  1. Playing an audio file in the background through html. For instance,
 sth like this:

 {{{
 <audio controls>
   <source src="horse.ogg" type="audio/ogg">
 Your browser does not support the audio element.
 </audio>
 }}}
  2. JS as seen here:

 https://github.com/MAVProxyUser/SilverPushUnmasked/blob/master/aud.js

 Happy to provide more samples in private :)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20214#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online