Timeline for Does TOR Leak Time and Time Zone?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 9, 2017 at 21:45 | comment | added | Andrew Lott | The specific clarity can be argued all day. Other users can confirm the answer as correct or not by voting up or down. | |
| Dec 21, 2016 at 8:21 | comment | added | Alexey Vesnin♦ | Well, it's pretty clear from my words and I'm happy that it was clear to the asker. The question is about hiding system time, not Tor browser's general overview, so I think it is fine and full answer as it is | |
| Dec 21, 2016 at 8:16 | comment | added | cacahuatl | I think it's not clear from your wording and also you fail to mention the actual protections tor browser uses to stop some of the fingerprinting? | |
| Dec 21, 2016 at 5:55 | comment | added | Alexey Vesnin♦ | Exactly the point, @canonizingironize !It can't access anything without JavaScript API, and it's sent separately, by browser itself. So you can disable all scripts and be able to send the form. the only way is browser add-on that can set some hidden value | |
| Dec 21, 2016 at 5:18 | comment | added | cacahuatl | How do you imagine an HTML form accesses local time and timezone settings without access to the javascript API? | |
| Dec 20, 2016 at 23:05 | comment | added | Alexey Vesnin♦ | If there's nothing encapsulated into HTTP and/or added/altered headers - you're correct. The browser add-ons are another leak source: this code is not runtime-controlled too, because the Tor Browser is a Firefox. To prevent time leaks completely - use a VM with browser. It's impossible - even via zero-day exploits - to access a host hypervisor in Virtualbox or Xen from within a browser running under unprivileged and sandboxed user, Root-launched browser can be potential leak source via code execution: guest addon module can potentially be communicated with | |
| Dec 20, 2016 at 21:58 | comment | added | John Bernard | Thanks Alexey. Other than Javascript, how does TOR prevent time leakage? Simply time information is not transmitted via HTTP requests so there is no special measure to prevent time leakage? | |
| Dec 20, 2016 at 21:55 | vote | accept | John Bernard | ||
| Dec 23, 2016 at 16:16 | |||||
| Dec 20, 2016 at 21:07 | history | answered | Alexey Vesnin♦ | CC BY-SA 3.0 |