Tor Users Can Be Tracked by Their Mouse Movements

Jose Carlos Norte has found a way to fingerprint Tor users and track them based on their mouse movements. However, the exploit can only be used if JavaScript is enabled in the browser.


Only you can jiggle that mouse in such a unique way, and there are people out there who might use this information to identify you. This ID technique could even be used to fingerprint those of us who use anonymous networks, like Tor, according to researcher Jose Carlos Norte.

“I have been able to fingerprint Tor browser users in controlled environments and I think it could be interesting to share all the findings for further discussion and to improve Tor browser,” he said on his website.

Tor works to anonymize its users on several levels: by covering up unique information surrounding your computer, which can be used to fingerprint you, and where your logging in from. Websites can fingerprint someone based on the screen size of their browser window, operating system, text size, and so on. Tor browser has implemented countermeasures on many of these fronts to make sure those who make use of its anonymous network can't be fingerprinted by ads, governments, or nefarious individuals.

Norte's exploit only works if users have JavaScript enabled in Tor browser. Through this method, he writes it became “easy to fingerprint users using tor browser to track their activity online and correlate their visits to different pages.”

We create a unique set of data when we use our mouse. If there's a mouse wheel, for instance, says Norte, “The mouse wheel event in Tor Browser (and most browsers) leaks information of the underlying hardware used to scroll the webpage.”

“Another leak in the mouse wheel, is the scroll speed that is linked to the configuration of the operating system and the hardware capabilities itself,” he adds.

Even the speed at which we move our mouse can be used to fingerprint us.Since the speed of the mouse is controlled by the operating system and related to hardware, and can be read using javascript if you can measure time using the mentioned strategies.”

Tor is a good way to maintain privacy on the internet, but it's not a perfect solution. There will always be people out there trying to find a way to crack the Tor network and de-anonymize its users. But its important to understand that this network of users includes activists, journalist, and those who wish to escape informational tyranny in their home countries.

The current solution to avoid this fingerprinting method is to keep JavaScript disabled. Bug tickets reveal Tor is working on a solution.

***

Photo Credit: DON EMMERT/AFP/Getty Images

Tor screenshot: Linux Screenshots/ Flickr

Natalie has been writing professionally for about 6 years. After graduating from Ithaca College with a degree in Feature Writing, she snagged a job at PCMag.com where she had the opportunity to review all the latest consumer gadgets. Since then she has become a writer for hire, freelancing for various websites. In her spare time, you may find her riding her motorcycle, reading YA novels, hiking, or playing video games. Follow her on Twitter: @nat_schumaker

​There are two kinds of failure – but only one is honorable

Malcolm Gladwell teaches "Get over yourself and get to work" for Big Think Edge.

Big Think Edge
  • Learn to recognize failure and know the big difference between panicking and choking.
  • At Big Think Edge, Malcolm Gladwell teaches how to check your inner critic and get clear on what failure is.
  • Subscribe to Big Think Edge before we launch on March 30 to get 20% off monthly and annual memberships.
Keep reading Show less

For a long time, the West shaped the world. That time is over.

The 21st century is experiencing an Asianization of politics, business, and culture.

Videos
  • Our theories about the world, even about history or the geopolitics of the present, tend to be shaped by Anglo perspectives of the Western industrial democracies, particularly those in the United States and the United Kingdom.
  • The West, however, is not united. Canada, for instance, acts in many ways that are not in line with American or British policies, particularly in regard to populism. Even if it were united, though, it would not represent most of the world's population.
  • European ideas, such as parliamentary democracy and civil service, spread across the world in the 19th century. In the 20th century, American values such as entrepreneurialism went global. In the 21st century, however, what we're seeing now is an Asianization — an Asian confidence that they can determine their own political systems, their own models, and adapt to their own circumstances.
Keep reading Show less

Why modern men are losing their testosterone

Research has shown that men today have less testosterone than they used to. What's happening?

Flickr user Tom Simpson
Sex & Relationships
  • Several studies have confirmed that testosterone counts in men are lower than what they used to be just a few decades ago.
  • While most men still have perfectly healthy testosterone levels, its reduction puts men at risk for many negative health outcomes.
  • The cause of this drop in testosterone isn't entirely clear, but evidence suggests that it is a multifaceted result of modern, industrialized life.
Keep reading Show less

Why the ocean you know and love won’t exist in 50 years

Can sensitive coral reefs survive another human generation?

Videos
  • Coral reefs may not be able to survive another human decade because of the environmental stress we have placed on them, says author David Wallace-Wells. He posits that without meaningful changes to policies, the trend of them dying out, even in light of recent advances, will continue.
  • The World Wildlife Fund says that 60 percent of all vertebrate mammals have died since just 1970. On top of this, recent studies suggest that insect populations may have fallen by as much as 75 percent over the last few decades.
  • If it were not for our oceans, the planet would probably be already several degrees warmer than it is today due to the emissions we've expelled into the atmosphere.
Keep reading Show less