TorButton / Tor Browser Bundle user with inaccurate system time (e.g. offset >5minutes or even hours) might be fingerprintable based on there system time.
What do you think about a feature in TorBrowser that would warn an user with inaccurate system time and suggest NTP if the system time is off by more than a certain (configurable) amount of time?
Oh man.. We'd need to make Torbutton a controller to solve this properly..
Trac: Priority: normal to major Component: Tor bundles/installation to TorBrowserButton Summary: TorButton/TorBrowser feature request: show warning if system time is out of certain boundaries to Adapt browser time based on tor control port events... Owner: erinn to mikeperry
Trac: Parent: N/Ato#3059 (moved) Summary: Adapt browser time based on tor control port events... to Adapt browser time based on tor's notion of clock skew...
The two sources for time in Firefox appear to be limited to PR_Now() and PRMJ_Now(). Not sure what the most efficient way to get the offset into these functions will be, though... Did someone say global variable that gets set from a pref observer? Yes, that sounds like a plan.