4 ms·
From the sounds of this it sounds like it doesn't persist past browser restart? I think that would significantly reduce the usefulness to attackers.
by bawolff 6mo ago
From the sounds of this it sounds like it doesn't persist past browser restart? I think that would significantly reduce the usefulness to attackers.
- shevy-java 6mo agoWould it though? I guess state agencies already know all nodes or may know all nodes. When you have a ton of meta-information all cross-linked, they can probably identify people quite accurately; may not even need 100% accuracy at all times and could do with less. I was thinking about that when they used information from any surrounding area or even sniffing through walls (I think? I don't quite recall the article but wasn't there an article like that in the last 3-5 years? The idea is to amass as much information as possible, even if it may not primarily have to do with solely the target user alone; e. g. I would call it "identify via proxy information").
- Barbing 6mo ago> I guess state agencies already know all nodes or may know all nodes. Assume the same. >The idea is to amass as much information as possible Reminded, from 2012: https://www.wired.com/2012/03/ff-nsadatacenter/ https://www.wired.com/2012/03/ff-nsadatacenter/
- akimbostrawman 6mo agoAll Tor nodes are publicly known. Just knowing them doesn't help tracking at all because of onion routing, they would need access to all nodes. https://metrics.torproject.org/rs.html https://metrics.torproject.org/rs.html
- mmooss 6mo agoMany users leave their browsers open for months.
- allthetime 6mo agoPrivacy and security conscious Tor users don’t.
- autoexec 6mo agoOpen enough tabs and you'd be lucky to keep firefox running for more than a couple weeks.
- danlitt 6mo agoI have had hundreds of tabs open for many months in the past. The bottleneck is usually the OS crashing rather than firefox.
- wongogue 6mo agoI have 488 tabs in the session with more than 50 loaded. The running session has 72 processes.
- Izkata 6mo agoI'm around 1700 tabs with somewhere in the 20s or 30s loaded. It's been a month or more since I restarted firefox.
- warkdarrior 6mo agoThis is where you use id bridging. 1. Website fingerprints the browser, stores a cookie with an ID and a fingerprint. 2. During the next session, it fingerprints again and compares with the cookie. If fingerprint changed, notify server about old and new fingerprint.
- piccirello 6mo agoThis excerpt from the article describes the risk well. > In Firefox Private Browsing mode, the identifier can also persist after all private windows are closed, as long as the Firefox process remains running. In Tor Browser, the stable identifier persists even through the "New Identity" feature, which is designed to be a full reset that clears cookies and browser history and uses new Tor circuits.
- fc417fc802 6mo agoI wonder why "New Identity" wasn't implemented as a fork-and-exec with a newly created profile?
- vscode-rest 6mo agoFollow the money.
- permo-w 6mo agoSeriously. TOR is primarily funded by the US government. Maybe this or not all bugs are deliberately left in for the sake of allowing backdoors, but people should not forget this
- tardedmeme 6mo agoOr it could just be a bug.