Live data from Hacker News

Ultrasound Tracking Could Be Used to Deanonymize Tor Users

bleepingcomputer.com

11–20 of 67 posts

Re: Ultrasound Tracking Could Be Used to Deanonymize Tor Users

#11
post #2

A bit of an edge case this. I know for me I mute my speakers permanently when using TOR in-case I encounter a shock page like Lemon Party or Goatse [1]: https://en.wikipedia.org/wiki/Shock_site

This hosts file is updated regularly to help prevent accidentally stumbling upon (shock|malicious|etc) style sites: http://someonewhocares.org/hosts/hosts

Been using it for a few months now and have found it invaluable.

Re: Ultrasound Tracking Could Be Used to Deanonymize Tor Users

#13
post #3

Wait what? How can a webpage play a sound if my speakers are muted? How do they bypass the little sound notification on my tabs? >If the Tor user has his phone somewhere nearby and if certain types of apps are on his phone, then his mobile device will ping back one or more advertisers with details about his device, so the advertiser can build an advertising profile on the user, linking his computer with his phone. Th…

Adblock that! This is pretty alarming actually - that advertisers are willing to go to such lengths, perhaps excuse my naïveté. The receiver could be someone else's device eg next door. Sure it has implications for an activist in London using tor but what about the rest of us? How can I easily tell whether a page is listening? Feedback maybe?

Re: Ultrasound Tracking Could Be Used to Deanonymize Tor Users

#15
post #11
post #2

A bit of an edge case this. I know for me I mute my speakers permanently when using TOR in-case I encounter a shock page like Lemon Party or Goatse [1]: https://en.wikipedia.org/wiki/Shock_site

This hosts file is updated regularly to help prevent accidentally stumbling upon (shock|malicious|etc) style sites: http://someonewhocares.org/hosts/hosts Been using it for a few months now and have found it invaluable.

Oh thanks for that! Does TOR honor the hosts file, specifically Tor Browser Bundle? I haven't tried.

Re: Ultrasound Tracking Could Be Used to Deanonymize Tor Users

#16
>If the Tor user has his phone somewhere nearby and if certain types of apps are on his phone, then his mobile device will ping back...

Surely the user would have had to approve microphone access for the app first, and it'd better have a good excuse.

Even then, does e.g. iOS allow backgrounded apps to listen in on the microphone ? Pretty sure only Siri has that level of privilege.

Has this whole ultrasound beacon thing taken off in the ad world ? Seems to (thankfully) require quite active user involvement to be able to work.

Re: Ultrasound Tracking Could Be Used to Deanonymize Tor Users

#17

TorBrowser has Javascript disabled by default, doesn't that mean you have to first 'trick' targets into visiting the webpage, and then trick them into turning on js?

I wonder if bgsound [1] attribute is still honored by modern browsers.

It's IE-specific, though, so won't work in a Tor browser.

[1]: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/bg...

Re: Ultrasound Tracking Could Be Used to Deanonymize Tor Users

#18
post #17

TorBrowser has Javascript disabled by default, doesn't that mean you have to first 'trick' targets into visiting the webpage, and then trick them into turning on js?

I wonder if bgsound [1] attribute is still honored by modern browsers. It's IE-specific, though, so won't work in a Tor browser. [1]: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/bg...

and a few other HTML5 sound capable tags don't require JS enabled IIRC.

Re: Ultrasound Tracking Could Be Used to Deanonymize Tor Users

#19
post #17

TorBrowser has Javascript disabled by default, doesn't that mean you have to first 'trick' targets into visiting the webpage, and then trick them into turning on js?

I wonder if bgsound [1] attribute is still honored by modern browsers. It's IE-specific, though, so won't work in a Tor browser. [1]: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/bg...

[deleted]
Post reply on HN