3 ms·
The site attacks seems to fail in Tor Browser. It returns a list of sites that have nothing to do with my browser history. Probably because Tor Browser reduces
by zmanian 11y ago
The site attacks seems to fail in Tor Browser. It returns a list of sites that have nothing to do with my browser history.
Probably because Tor Browser reduces the time precision.[1]
It seems like it would be nice to require some sort of user privilege escalation like accessing location, or webcam to access high precision timing. This would close off a huge class of time related side channels.
[1]https://trac.torproject.org/projects/tor/ticket/1517 https://trac.torproject.org/projects/tor/ticket/1517
- bcrypt 11y agoTor Browser restricts js timing precision to 100 milliseconds, which makes this way harder. HTTPS Everywhere also creates a lot of false positives, although those can be subtracted out. See discussion at https://trac.torproject.org/projects/tor/ticket/17423 https://trac.torproject.org/projects/tor/ticket/17423