[tor-bugs] #10703 [TorBrowserButton]: Fallback charset enables fingerprinting of bundle localization

Thu Jan 30 00:45:04 UTC 2014

#10703: Fallback charset enables fingerprinting of bundle localization
-------------------------+-------------------------------------------------
     Reporter:  dcf      |      Owner:  mikeperry
         Type:  defect   |     Status:  needs_review
     Priority:  normal   |  Milestone:
    Component:           |    Version:
  TorBrowserButton       |   Keywords:  tbb-fingerprinting, tbb-pref,
   Resolution:           |  MikePerry201401R
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------

Comment (by dcf):

 The [[ticket:10140|ja]] (Japanese) bundle uses
 [https://en.wikipedia.org/wiki/Shift_JIS Shift JIS] as a fallback
 encoding, making it also distinct.

  * utf-8: ã %C3%A3
  * iso-8859-1: Ã£ %C3%83%C2%A3
  * iso-8859-2: ĂŁ %C4%82%C5%81
  * windows-1251: ГЈ %D0%93%D0%88
  * euc-kr: 찾 %EC%B0%BE
  * gbk: 茫 %E8%8C%AB
  * shift_jis: ﾃ｣ %EF%BE%83%EF%BD%A3

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10703#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online