[tor-bugs] #13017 [Applications/Tor Browser]: Determine if AudioBuffers/OfflineAudioContext are a fingerprinting vector

[Tor Bug Tracker & Wiki]

#13017: Determine if AudioBuffers/OfflineAudioContext are a fingerprinting vector
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:
     Type:  task                                 |  arthuredelstein
 Priority:  Very High                            |         Status:
Component:  Applications/Tor Browser             |  assigned
 Severity:  Critical                             |      Milestone:
 Keywords:  tbb-fingerprinting-os, tbb-easy,     |        Version:
  TorBrowserTeam201605                           |     Resolution:
Parent ID:                                       |  Actual Points:
 Reviewer:                                       |         Points:
                                                 |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by mikeperry):

 I have two points for further experimentation either here or #13018:
 1. Can we find two Linux systems that have the same bit-width but
 different fingerprints here (Ie: debian/stable vs Fedora, or something
 with a large time difference between releases and differences in base
 system)
 2. If so, a useful test would be testing if simply copying the same
 libm.so (found in either /lib/x86_64-linux-gnu/libm.so.6 or
 /usr/lib/x86_64-linux-gnu/libm.so on my system) onto both TBB's
 TorBrowser/Tor/ directory to see if the fingerprints here become identical
 again. That Tor directory should be in LD_LIBRARY_PATH, overriding the
 /lib search. You can check /proc/pid/maps to see if it got loaded.

 This simple test would help us determine if we're just looking at math
 routine differences. In which case, we could ship the equivalent of a
 uniform set of math routines for all platforms for TBB, and use those
 instead.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13017#comment:27>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online