[tor-bugs] #22919 [Applications/Tor Browser]: Form tracking and OS fingerprinting (only Windows, but without Javascript)
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Oct 17 20:01:53 UTC 2019
#22919: Form tracking and OS fingerprinting (only Windows, but without Javascript)
-------------------------------------------------+-------------------------
Reporter: basvd | Owner: tbb-
| team
Type: defect | Status:
| needs_revision
Priority: High | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Major | Resolution:
Keywords: tbb-fingerprinting, | Actual Points:
TorBrowserTeam201910 |
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------------------------------+-------------------------
Comment (by acat):
Replying to [comment:6 tom]:
> I don't believe GenerateRandomSeed is available outside of the js
engine. But you're right about the bits
Right, and it uses `PRMJ_Now()` which is also only in `js`.
We could maybe have a local version of `js::GenerateRandomSeed()`?
Changing `PRMJ_Now()` -> `PR_Now()` and maybe using the same `srand/rand`
fallback as in the patch? I think the resulting code is simpler than the
one using `@mozilla.org/security/random-generator;1` (assuming both have
similar security, speed and availability).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22919#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list