[tor-bugs] #6119 [Quality Assurance and Testing]: Create our own instance of Panopticlick

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jun 18 08:15:33 UTC 2015


#6119: Create our own instance of Panopticlick
-----------------------------------------------+---------------------------
     Reporter:  mikeperry                      |      Owner:  cypherpunks
         Type:  project                        |     Status:  new
     Priority:  critical                       |  Milestone:
    Component:  Quality Assurance and Testing  |    Version:
   Resolution:                                 |   Keywords:  tbb-
Actual Points:                                 |  fingerprinting
       Points:                                 |  Parent ID:  #5292
-----------------------------------------------+---------------------------

Comment (by qSKvY):

 I've been working for a while on my fingerprinting website, Libre-
 Panopticlick (name subject to change when a better one is thought up;
 suggestions are appreciated).
 It's resembles Panopticlick and AmIUnique except that it has a few tests
 designed specifically for Tor users, based on Tor trac tickets.
 Those are:

  1. Whether the client is using Tor. Checked by performing a TorDNSEL
 request on the client / server combo.
  1. The time difference between the client and server in minutes.
  1. The output of toLocaleString() called on the UNIX epoch. The output of
 this differs based on browser locale, timezone, and browser, and has been
 confirmed to differ between instances of the Tor browser running on Linux
 and Windows.
  1. The output of Math.tan(-1e300), which differs based on operating
 system and reveals the underlying operating system that the Tor browser is
 being run on. This leaks the underlying platform that the TBB is being run
 on. For instance on a 64bit Linux machine it produces the value
 -1.4214488238747245 and on a Windows machine it produces the value
 -4.987183803371025.

 At the moment it's in workable order and ready for at least a beta test.
 I'd like to get an initial instance of it set up and running within the
 next two weeks.
 I can provide hosting but I was wondering whether, when it's set up, I
 could get the Tor Project to direct some traffic towards it, since it was
 designed with the Tor project in mind.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6119#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list