[tor-bugs] #15646 [Tor Browser]: KeyboardEvent may allow fingerprinting of keyboard layout

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jul 13 21:56:28 UTC 2015


#15646: KeyboardEvent may allow fingerprinting of keyboard layout
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  arthuredelstein
  cypherpunks            |     Status:  needs_review
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  ff38-esr, tbb-fingerprinting, tbb-5
  Browser                |  .0a-highrisk, TorBrowserTeam201507R
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by mikeperry):

 Replying to [comment:19 mikeperry]:
 > I'm also wondering if we should move createKeyCodes() into a global
 static object with its own constructor (which should run at program
 initialization).

 https://developer.mozilla.org/en-
 US/docs/Mozilla/C++_Portability_Guide#Don%27t_use_static_constructors

 Maybe don't listen to me wrt static constructors. Apparently ancient
 compiler bugs with static constructors used to be a thing (though I'm
 pretty sure Firefox won't compile with a C++ compiler older than like 5
 years anyway). I'm still a bit worried about the potential initialization
 race here, though. I wonder if anyone at Mozilla might make any
 suggestions?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15646#comment:20>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list