[tor-bugs] #15646 [Tor Browser]: KeyboardEvent may allow fingerprinting of keyboard layout

[Tor Bug Tracker & Wiki]

#15646: KeyboardEvent may allow fingerprinting of keyboard layout
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  arthuredelstein
  cypherpunks            |     Status:  needs_revision
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  ff38-esr, tbb-fingerprinting, tbb-5
  Browser                |  .0a-highrisk, TorBrowserTeam201508,
   Resolution:           |  GeorgKoppen201507R
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------

Comment (by gk):

 Replying to [comment:33 arthuredelstein]:
 > Replying to [comment:32 gk]:
 > > Windows 7 and I press Right ALT + "<".
 >
 > I think I understand what's happening now: on your keyboard, the Right
 Alt key is being interpreted as an
 [https://en.wikipedia.org/wiki/AltGr_key AltGr key], which is
 [https://en.wikipedia.org/wiki/AltGr_key#Control_.2B_Alt_as_a_substitute
 often emulated with Ctrl+Alt]. It seems Windows or Firefox is doing the
 inverse substitution by re-interpreting AltGr as Ctrl+Alt.
 >
 > So if this understanding is correct, it means that if you use the Left
 Alt key instead, you should get `ctrlKey = false`. Is that what you see?

 Yes. I think your analysis is correct.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15646#comment:36>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online