Tor Users Can Be Tracked by Their Mouse Movements

Jose Carlos Norte has found a way to fingerprint Tor users and track them based on their mouse movements. However, the exploit can only be used if JavaScript is enabled in the browser.


Only you can jiggle that mouse in such a unique way, and there are people out there who might use this information to identify you. This ID technique could even be used to fingerprint those of us who use anonymous networks, like Tor, according to researcher Jose Carlos Norte.

“I have been able to fingerprint Tor browser users in controlled environments and I think it could be interesting to share all the findings for further discussion and to improve Tor browser,” he said on his website.

Tor works to anonymize its users on several levels: by covering up unique information surrounding your computer, which can be used to fingerprint you, and where your logging in from. Websites can fingerprint someone based on the screen size of their browser window, operating system, text size, and so on. Tor browser has implemented countermeasures on many of these fronts to make sure those who make use of its anonymous network can't be fingerprinted by ads, governments, or nefarious individuals.

Norte's exploit only works if users have JavaScript enabled in Tor browser. Through this method, he writes it became “easy to fingerprint users using tor browser to track their activity online and correlate their visits to different pages.”

We create a unique set of data when we use our mouse. If there's a mouse wheel, for instance, says Norte, “The mouse wheel event in Tor Browser (and most browsers) leaks information of the underlying hardware used to scroll the webpage.”

“Another leak in the mouse wheel, is the scroll speed that is linked to the configuration of the operating system and the hardware capabilities itself,” he adds.

Even the speed at which we move our mouse can be used to fingerprint us.Since the speed of the mouse is controlled by the operating system and related to hardware, and can be read using javascript if you can measure time using the mentioned strategies.”

Tor is a good way to maintain privacy on the internet, but it's not a perfect solution. There will always be people out there trying to find a way to crack the Tor network and de-anonymize its users. But its important to understand that this network of users includes activists, journalist, and those who wish to escape informational tyranny in their home countries.

The current solution to avoid this fingerprinting method is to keep JavaScript disabled. Bug tickets reveal Tor is working on a solution.

***

Photo Credit: DON EMMERT/AFP/Getty Images

Tor screenshot: Linux Screenshots/ Flickr

Natalie has been writing professionally for about 6 years. After graduating from Ithaca College with a degree in Feature Writing, she snagged a job at PCMag.com where she had the opportunity to review all the latest consumer gadgets. Since then she has become a writer for hire, freelancing for various websites. In her spare time, you may find her riding her motorcycle, reading YA novels, hiking, or playing video games. Follow her on Twitter: @nat_schumaker

Compelling speakers do these 4 things every single time

The ability to speak clearly, succinctly, and powerfully is easier than you think

Former U.S. President Barack Obama speaks during a Democratic Congressional Campaign Committee rally at the Anaheim Convention Center on September 8, 2018 in Anaheim, California. (Photo by Barbara Davidson/Getty Images)
Personal Growth

The ability to communicate effectively can make or break a person's assessment of your intelligence, competence, and authenticity.

Keep reading Show less

This 5-minute neck scan can spot dementia 10 years before it emerges

The results come from a 15-year study that used ultrasound scans to track blood vessels in middle-aged adults starting in 2002.

Mikhail Kalinin via Wikipedia
Mind & Brain
  • The study measured the stiffness of blood vessels in middle-aged patients over time.
  • Stiff blood vessels can lead to the destruction of delicate blood vessels in the brain, which can contribute to cognitive decline.
  • The scans could someday become a widely used tool to identify people at high risk of developing dementia and Alzheimer's.
Keep reading Show less

How 'dark horses' flip the script of success and happiness

What defines a dark horse? The all-important decision to pursue fulfillment and excellence.

Big Think Books

When we first set the Dark Horse Project in motion, fulfillment was the last thing on our minds. We were hoping to uncover specific and possibly idiosyncratic study methods, learning techniques, and rehearsal regimes that dark horses used to attain excellence. Our training made us resistant to ambiguous variables that were difficult to quantify, and personal fulfillment seemed downright foggy. But our training also taught us never to ignore the evidence, no matter how much it violated our expectations.

Keep reading Show less