[tor-bugs] #15646 [Tor Browser]: KeyboardEvent may allow fingerprinting of keyboard layout

[Tor Bug Tracker & Wiki]

#15646: KeyboardEvent may allow fingerprinting of keyboard layout
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  arthuredelstein
  cypherpunks            |     Status:  needs_revision
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  ff38-esr, tbb-fingerprinting, tbb-5
  Browser                |  .0a-highrisk, TorBrowserTeam201506R
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by mikeperry):

 I took a look at this code and it seems good enough to include in 5.0a3.
 From a pedantic correctness standpoint, I am wary of createKeyCodes()'s
 setup code being called from the first KeyboardEvent, which could
 potentially race with a KeyboardEvent from another thread and cause
 reentrancy issues with the hashtables. This does seem unlikely in
 practice, though. Perhaps even impossible, if keyboard events can only
 arrive on the main thread.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15646#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online