Delivery-Date: Thu, 20 Aug 2015 23:57:15 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,DKIM_ADSP_ALL,
	DKIM_SIGNED,RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 6E3FB1E03F5;
	Thu, 20 Aug 2015 23:57:13 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 9F19836EBD;
	Fri, 21 Aug 2015 03:57:07 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id AEF1236EC9
 for <tor-talk@lists.torproject.org>; Fri, 21 Aug 2015 03:57:04 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 7hOmbTPLOW_e for <tor-talk@lists.torproject.org>;
 Fri, 21 Aug 2015 03:57:04 +0000 (UTC)
Received: from smtp8.openmailbox.org (smtp8.openmailbox.org [62.4.1.42])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 7A9BF36E08
 for <tor-talk@lists.torproject.org>; Fri, 21 Aug 2015 03:57:04 +0000 (UTC)
Received: by mail2.openmailbox.org (Postfix, from userid 1004)
 id 16BBD2AC1442; Fri, 21 Aug 2015 05:57:00 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=openmailbox.org;
 s=openmailbox; t=1440129420;
 bh=CpyxS3zAGKYDfUYTSpSizC8WqhUBX7RyH0a7j2TnLy4=;
 h=Date:From:To:Subject:References:In-Reply-To:From;
 b=EVBLpjrtPJMf2A8Zq86Ju4nBc2VgGHfqSBPTLL3uWDPQEPBq+dKyHkmgK0n4t1nxK
 Eh6SO51ZF+oLZNP5AQ81jU9McTajGI+QNlzO8JsgnT+77oyPzqsWEYe4i4ZiDn7+3p
 zkt3IQBlf81kmiGRg4GluUr8HL9MaSYVOmiSs4MQ=
Message-ID: <55D6A16C.1090403@openmailbox.org>
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=openmailbox.org;
 s=openmailbox; t=1440129417;
 bh=CpyxS3zAGKYDfUYTSpSizC8WqhUBX7RyH0a7j2TnLy4=;
 h=Date:From:To:Subject:References:In-Reply-To:From;
 b=DS1us5u9NSWxVIMdf3gt2C30crG/Df/Sju3hqFGfChCS2X0S6KzuRfdWEYq5R2rwl
 jV3bgQQW8j7SxDLLFkz8PUXVjCCE7DWXQ4d2UuQGlBQWUENlOOeap7BFHBprQ2LchU
 cTsBfyUeCNEMMuUE18lEqiAakrptZGuEMQE5gwcM=
Date: Fri, 21 Aug 2015 06:56:28 +0300
From: Qaz <qazxswedc@openmailbox.org>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Icedove/31.8.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <55BAB4EF.2090905@riseup.net> <55D5A17B.1030000@torproject.org>
In-Reply-To: <55D5A17B.1030000@torproject.org>
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Subject: Re: [tor-talk] Profiling Tor users via keystrokes
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============6161153167482143152=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============6161153167482143152==
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="3PIlNRaOBuCnowp3x3rL3rWF3RVhkKexB"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--3PIlNRaOBuCnowp3x3rL3rWF3RVhkKexB
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Hi!

Yes this is really interesting, I think I came across the same article
weeks ago. Looking forward to those studies mentioned by Georg.

Thanks!

On 08/20/2015 12:44 PM, Georg Koppen wrote:
> flapflap:
>> Hi!
>>
>> (I didn't find this topic discussed here yet and I think it might be
>> interesting)
>>
>> the article
>>
>> http://arstechnica.com/security/2015/07/how-the-way-you-type-can-shatt=
er-anonymity-even-on-tor/
>> says that apparently it's possible to deanonymise Tor users by analysi=
ng
>> their keystrokes in input fields of websites.
>>
>> Is it valid to assume that such a technique is possible to be deployed=

>> by, for example, cloudflare? (needs JavaScript, has an input field)
>> (or is it required for learning to always enter the same text by the
>> same user?)
>>
>> Is there need for modifications in the Tor Browser Bundle/upstream Fir=
efox?
> We already patch Tor Browser to reduce the precision of keypress events=
=2E
> See: https://bugs.torproject.org/1517. It would be nice to see a study
> that evaluates whether this is effective or not and if not, why not.
> Anyway, there is still something to do in this area:
> https://bugs.torproject.org/16110.
>
> Georg
>
>
>
>


--3PIlNRaOBuCnowp3x3rL3rWF3RVhkKexB
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=9G01
-----END PGP SIGNATURE-----

--3PIlNRaOBuCnowp3x3rL3rWF3RVhkKexB--

--===============6161153167482143152==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============6161153167482143152==--

