[tor-bugs] #13017 [Applications/Tor Browser]: Determine if AudioBuffers/OfflineAudioContext are a fingerprinting vector

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Aug 11 21:44:34 UTC 2016


#13017: Determine if AudioBuffers/OfflineAudioContext are a fingerprinting vector
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:
                                                 |  arthuredelstein
     Type:  task                                 |         Status:
                                                 |  assigned
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Critical                             |     Resolution:
 Keywords:  tbb-fingerprinting-os,               |  Actual Points:
  TorBrowserTeam201608                           |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by qSKvY):

 I run browserprint.info which has these tests on it and can confirm that
 the tests appear to be stable among regular browsers.
 We looked at sets of multiple fingerprints that were made by the same
 browser.
 We found that "Fingerprint using DynamicsCompressor (sum of buffer
 values):", "Fingerprint using DynamicsCompressor (hash of full buffer):",
 and "AudioContext properties:" where very stable (between 1 and 10
 instances out of ~500 of them changing between fingerprints).
 The other two were less stable but the majority of the time they were
 consistent (56 and 87 instances of them changing between fingerprints out
 of ~500).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13017#comment:34>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list