Re: Proposal for Anti-Keystroke Fingerprinting at the Display Server Level

2016-03-25 Thread bancfc
On 2016-03-24 19:49, Jasper St. Pierre wrote: I think this should be done at the application level. If an application is running, it has many other ways to fingerprint your computer, including listing the files in your homedir, checking cpuid, MAC address, etc. Many solutions like virtualizatio

Re: Proposal for Anti-Keystroke Fingerprinting at the Display Server Level

2016-03-24 Thread bancfc
On 2016-03-24 12:45, Pekka Paalanen wrote: Hi, that's interesting. Sounds like you are looking for volunteers to implement what you want, right? Yes please. Unfortunately I don't know C or have the skill to code something like this myself. I skimmed through [3], and I got the impression

Proposal for Anti-Keystroke Fingerprinting at the Display Server Level

2016-03-23 Thread bancfc
== Attack Description == Keystroke fingerprinting works by measuring how long keys are pressed and the time between presses. Its very high accuracy poses a serious threat to anonymous users.[1] This tracking technology has been deployed by major advertisers (Google, Facebook), banks and mass