[tor-bugs] #30436 [- Select a component]: Visit duration tracking possible in TorBrowser using a favicon which downloads from a server using a connection that's never closed
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed May 8 12:54:33 UTC 2019
#30436: Visit duration tracking possible in TorBrowser using a favicon which
downloads from a server using a connection that's never closed
-----------------------------+--------------------------------------
Reporter: ehsan.akhgari@… | Owner: (none)
Type: defect | Status: new
Priority: Medium | Component: - Select a component
Version: | Severity: Normal
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
-----------------------------+--------------------------------------
The attack scenario is described here
https://twitter.com/davywtf/status/951203191944773632.
The code sample can be found at https://github.com/wybiral/tracker.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30436>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list