Opened 4 years ago

Closed 4 years ago

#16726 closed defect (duplicate)

Should Tor Browser delay keystrokes to avoid dwell and gap analysis?

Reported by: teor Owned by: tbb-team
Priority: High Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Some sites are using the dwell and gap times of user typing to reliably identify users, potentially across sites.

Should Tor Browser buffer keystrokes, and release them at regular intervals (50ms is suggested) in order to defeat this kind of analysis?

https://paul.reviews/behavioral-profiling-the-password-you-cant-change/
https://godpraksis.no/2015/07/the-privacy-risk-of-behavioral-profiling/

Credit to Zorgon on #tor-dev for linking to this article.

Child Tickets

Change History (2)

comment:1 Changed 4 years ago by cypherpunks

Priority: normalmajor

comment:2 Changed 4 years ago by gk

Resolution: duplicate
Status: newclosed

We are doing this actually in the current alpha series and the upcoming stable one. This got implemented by #1517. #16110 is a follow-up ticket as it seems not so easy to get this right. Either way, this is a duplicate.

Note: See TracTickets for help on using tickets.