#31324: Spoof the Tor Browser time displayed to websites
------------------------------+------------------------------------------
Reporter: cypherpunks | Owner: tbb-team
Type: enhancement | Status: new
Priority: Medium | Component: Applications/Tor Browser
Version: Tor: unspecified | Severity: Normal
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
------------------------------+------------------------------------------
Javascript can be used to get the system time of a user. This allows for
fingerprinting via different clock offsets and skews. This also may allow
websites to determine the user's location by seeing which country has the
same time as the user.
Currently, the Tor Browser spoofs the timezone displayed to websites to
UTC but this doesn't spoof the actual system time which can still be
gotten with `new Date()`.
The Tor Browser should spoof the time shown to websites so all Tor Browser
users have the same time or a random time.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31324>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
