Tor Users Can Be Tracked by Their Mouse Movements

Jose Carlos Norte has found a way to fingerprint Tor users and track them based on their mouse movements. However, the exploit can only be used if JavaScript is enabled in the browser.


Only you can jiggle that mouse in such a unique way, and there are people out there who might use this information to identify you. This ID technique could even be used to fingerprint those of us who use anonymous networks, like Tor, according to researcher Jose Carlos Norte.

“I have been able to fingerprint Tor browser users in controlled environments and I think it could be interesting to share all the findings for further discussion and to improve Tor browser,” he said on his website.

Tor works to anonymize its users on several levels: by covering up unique information surrounding your computer, which can be used to fingerprint you, and where your logging in from. Websites can fingerprint someone based on the screen size of their browser window, operating system, text size, and so on. Tor browser has implemented countermeasures on many of these fronts to make sure those who make use of its anonymous network can't be fingerprinted by ads, governments, or nefarious individuals.

Norte's exploit only works if users have JavaScript enabled in Tor browser. Through this method, he writes it became “easy to fingerprint users using tor browser to track their activity online and correlate their visits to different pages.”

We create a unique set of data when we use our mouse. If there's a mouse wheel, for instance, says Norte, “The mouse wheel event in Tor Browser (and most browsers) leaks information of the underlying hardware used to scroll the webpage.”

“Another leak in the mouse wheel, is the scroll speed that is linked to the configuration of the operating system and the hardware capabilities itself,” he adds.

Even the speed at which we move our mouse can be used to fingerprint us.Since the speed of the mouse is controlled by the operating system and related to hardware, and can be read using javascript if you can measure time using the mentioned strategies.”

Tor is a good way to maintain privacy on the internet, but it's not a perfect solution. There will always be people out there trying to find a way to crack the Tor network and de-anonymize its users. But its important to understand that this network of users includes activists, journalist, and those who wish to escape informational tyranny in their home countries.

The current solution to avoid this fingerprinting method is to keep JavaScript disabled. Bug tickets reveal Tor is working on a solution.

***

Photo Credit: DON EMMERT/AFP/Getty Images

Tor screenshot: Linux Screenshots/ Flickr

Natalie has been writing professionally for about 6 years. After graduating from Ithaca College with a degree in Feature Writing, she snagged a job at PCMag.com where she had the opportunity to review all the latest consumer gadgets. Since then she has become a writer for hire, freelancing for various websites. In her spare time, you may find her riding her motorcycle, reading YA novels, hiking, or playing video games. Follow her on Twitter: @nat_schumaker

LinkedIn meets Tinder in this mindful networking app

Swipe right to make the connections that could change your career.

Getty Images
Sponsored
Swipe right. Match. Meet over coffee or set up a call.

No, we aren't talking about Tinder. Introducing Shapr, a free app that helps people with synergistic professional goals and skill sets easily meet and collaborate.

Keep reading Show less

Can the keto diet help treat depression? Here’s what the science says so far

A growing body of research shows promising signs that the keto diet might be able to improve mental health.

Public Domain
Mind & Brain
  • The keto diet is known to be an effective tool for weight loss, however its effects on mental health remain largely unclear.
  • Recent studies suggests that the keto diet might be an effective tool for treating depression, and clearing up so-called "brain fog," though scientists caution more research is necessary before it can be recommended as a treatment.
  • Any experiments with the keto diet are best done in conjunction with a doctor, considering some people face problems when transitioning to the low-carb diet.
Keep reading Show less

Steven Pinker's 13 rules for writing better

The Harvard psychologist loves reading authors' rules for writing. Here are his own.

NEW YORK, NY - JULY 21: Steven Pinker speaks onstage during OZY Fest 2018 at Rumsey Playfield, Central Park on July 21, 2018 in New York City. (Photo by Brad Barket/Getty Images for Ozy Media)
Personal Growth
  • Steven Pinker is many things: linguist, psychologist, optimist, Harvard professor, and author.
  • When it comes to writing, he's a student and a teacher.
  • Here's are his 13 rules for writing better, more simply, and more clearly.
Keep reading Show less

Want to age gracefully? A new study says live meaningfully

Thinking your life is worthwhile is correlated with a variety of positive outcomes.

YOSHIKAZU TSUNO/AFP/Getty Images
Surprising Science
  • A new study finds that adults who feel their lives are meaningful have better health and life outcomes.
  • Adults who felt their lives were worthwhile tended to be more social and had healthier habits.
  • The findings could be used to help improve the health of older adults.
Keep reading Show less