[tor-bugs] #16659 [- Select a component]: Linux TCP Initial Sequence Numbers may aid correlation

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Aug 5 22:56:00 UTC 2015


#16659: Linux TCP Initial Sequence Numbers may aid correlation
--------------------------------------+----------------------
     Reporter:  source                |      Owner:
         Type:  defect                |     Status:  reopened
     Priority:  normal                |  Milestone:
    Component:  - Select a component  |    Version:
   Resolution:                        |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |
--------------------------------------+----------------------

Comment (by sjmurdoch):

 There seems to be some confusion here. What the Linux ISN leaks is the
 difference between two timestamps, not the timestamp itself. A difference
 lets you work out drift and skew, which can help someone fingerprint the
 computer hardware, its environment and load. Of course that only works if
 you can probe a computer, and maintain the same source/destination port
 and IP address.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16659#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list