[tor-bugs] #6119 [Quality Assurance and Testing]: Create our own instance of Panopticlick

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jul 2 11:59:11 UTC 2015


#6119: Create our own instance of Panopticlick
-----------------------------------------------+---------------------------
     Reporter:  mikeperry                      |      Owner:  cypherpunks
         Type:  project                        |     Status:  new
     Priority:  critical                       |  Milestone:
    Component:  Quality Assurance and Testing  |    Version:
   Resolution:                                 |   Keywords:  tbb-
Actual Points:                                 |  fingerprinting
       Points:                                 |  Parent ID:  #5292
-----------------------------------------------+---------------------------

Comment (by gk):

 Replying to [comment:19 qSKvY]:
 > I've been working for a while on my fingerprinting website, Libre-
 Panopticlick (name subject to change when a better one is thought up;
 suggestions are appreciated).
 > It's resembles Panopticlick and AmIUnique except that it has a few tests
 designed specifically for Tor users, based on Tor trac tickets.
 > Those are:
 >
 >  1. Whether the client is using Tor. Checked by performing a TorDNSEL
 request on the client / server combo.
 >  1. The time difference between the client and server in minutes.
 >  1. The output of toLocaleString() called on the UNIX epoch. The output
 of this differs based on browser locale, timezone, and browser, and has
 been confirmed to differ between instances of the Tor browser running on
 Linux and Windows.
 >  1. The output of Math.tan(-1e300), which differs based on operating
 system and reveals the underlying operating system that the Tor browser is
 being run on. This leaks the underlying platform that the TBB is being run
 on. For instance on a 64bit Linux machine it produces the value
 -1.4214488238747245 and on a Windows machine it produces the value
 -4.987183803371025.
 >
 > At the moment it's in workable order and ready for at least a beta test.

 Exciting. Do you have a link to the code you are using for it? And one
 where it is running? You might as well be interested in
 https://lists.torproject.org/pipermail/tor-dev/2014-March/006486.html
 where we discussed things around Panopticlick more or less recently.

 > I'd like to get an initial instance of it set up and running within the
 next two weeks.
 > I can provide hosting but I was wondering whether, when it's set up, I
 could get the Tor Project to direct some traffic towards it, since it was
 designed with the Tor project in mind.

 What do you have in mind if you are saying "direct some traffic towards
 it"?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6119#comment:20>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list