[tor-bugs] #6119 [Quality Assurance and Testing]: Create our own instance of Panopticlick

[Tor Bug Tracker & Wiki]

#6119: Create our own instance of Panopticlick
-----------------------------------------------+---------------------------
     Reporter:  mikeperry                      |      Owner:  cypherpunks
         Type:  project                        |     Status:  new
     Priority:  critical                       |  Milestone:
    Component:  Quality Assurance and Testing  |    Version:
   Resolution:                                 |   Keywords:  tbb-
Actual Points:                                 |  fingerprinting
       Points:                                 |  Parent ID:  #5292
-----------------------------------------------+---------------------------

Comment (by elypter):

 Replying to [comment:23 qSKvY]:
 > Can you elaborate on what you mean by "compares it to how torbrowser
 should look like with normal settings"?
 it should show which fingerprints are like the ones with the newest
 version of torbrowser(maybe support multiple versions) and which deviate
 from the norm. it could be like on ip-check.org or with check marks. so an
 user can easily detect if an addon changed some browser settings or
 torbrowser has been modified in any way.

 > You mean like a web browser bookmark?
 yes or simply a link he can safe

 > I like this idea, but in order to make it possible fingerprints would
 have to be publicly accessible; I don't think this is a good thing to do
 by default so perhaps there should be a checkbox before submitting your
 fingerprint that says "Make my fingerprint public and allow it to be
 bookmarked".
 i think so too but saving doesnt require it to become public if the link
 has a random id in it that only the user knows(like with google doc
 editing). it depends on the user if he wants to trust the server. he could
 be given the choice to not save it, saving only for personal use and
 saving it and also allowing to to contribute to statistics.

 > Did you have a particular format in mind?
 >
 > Do you think a plain text format like the following be fine, or do you
 think going with something fancier like XML or JSON would be better?
 > > --Platform (JavaScript)
 > > Linux x86_64
 > > --Time Zone-570
 > > --Screen Size and Color Depth
 > > 1920x1080x24
 depends on what the information can be used for. possible uses are storing
 for later review, storing for uploading it to the site again for later
 comparison or for bug reporting. dont know if its worth making a database
 file export and upload function if the user could also save it on the
 server. the user has to trust the server about the servrside
 fingerprinting anyway on the other hand javascript produces the majority
 of information. so i think its your choice if its worth the effort.

 about the comparing function in general i thought it would be nice to have
 the site calculate the amount of overlapping fingerprinting information.
 with the bits of identifying information you could calcuate with what
 certainty an adversary could link the 2 fingerprints among the group of
 all users in the database.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6119#comment:24>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online