Opened 7 years ago

Last modified 12 days ago

#2940 new enhancement

Adapt browser time based on tor's notion of clock skew...

Reported by: tagnaq Owned by: tbb-team
Priority: High Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-fingerprinting-time-skew, tbb-torbutton
Cc: tagnaq@…, StrangeCharm, gk, adrelanos@…, nicoo Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

TorButton / Tor Browser Bundle user with inaccurate system time (e.g. offset >5minutes or even hours) might be fingerprintable based on there system time.
What do you think about a feature in TorBrowser that would warn an user with inaccurate system time and suggest NTP if the system time is off by more than a certain (configurable) amount of time?

http://browserspy.dk/date.php

Child Tickets

Change History (15)

comment:1 Changed 7 years ago by tagnaq

Cc: tagnaq@… added

comment:2 Changed 6 years ago by mikeperry

Component: Tor bundles/installationTorBrowserButton
Owner: changed from erinn to mikeperry
Priority: normalmajor
Summary: TorButton/TorBrowser feature request: show warning if system time is out of certain boundariesAdapt browser time based on tor control port events...

Oh man.. We'd need to make Torbutton a controller to solve this properly..

comment:3 Changed 6 years ago by mikeperry

Parent ID: #3059
Summary: Adapt browser time based on tor control port events...Adapt browser time based on tor's notion of clock skew...

comment:4 Changed 6 years ago by mikeperry

#3652 is the Tor Client bug we need to do this easily.

comment:5 Changed 6 years ago by mikeperry

The two sources for time in Firefox appear to be limited to PR_Now() and PRMJ_Now(). Not sure what the most efficient way to get the offset into these functions will be, though... Did someone say global variable that gets set from a pref observer? Yes, that sounds like a plan.

comment:6 Changed 6 years ago by mikeperry

Cc: StrangeCharm added

comment:7 Changed 6 years ago by gk

Cc: g.koppen@… added

comment:8 Changed 5 years ago by mikeperry

Keywords: tbb-fingerprinting added

comment:9 Changed 3 years ago by erinn

Component: TorBrowserButtonTor Browser
Keywords: tbb-torbutton added
Owner: changed from mikeperry to tbb-team

comment:10 Changed 3 years ago by mikeperry

Keywords: tbb-fingerprinting-time-skew added; tbb-fingerprinting removed

See also #12999.

comment:11 Changed 3 years ago by mikeperry

Parent ID: #3059

comment:12 Changed 3 years ago by gk

Cc: gk added; g.koppen@… removed

comment:13 Changed 3 years ago by proper

Cc: adrelanos@… added

comment:14 Changed 2 years ago by nicoo

Cc: nicoo added

comment:15 Changed 12 days ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

Note: See TracTickets for help on using tickets.