Tor Users Can Be Tracked Based On Their Mouse Movements (softpedia.com)

An anonymous reader writes: The way you move your mouse is unique, like fingerprints, and can be used by dark forces to track you on supposedly anonymous and secure networks like Tor, according to a Barcelona researcher. Because the Tor Project has failed to address a ten-month-old issue regarding "time measurement via JavaScript," there are a series of user fingerprinting techniques that are quite accurate at identifying users based on their mouse movements, scrolling speed, and how their browser and hardware reacts to certain JavaScript code. If a user visits a "fingerprinting" website via Tor and then via a normal browser, an attacker can have a general idea about their identity and can even pinpoint them to real IPs. The data that is usually logged in fingerprinting schemes is not 100% reliable or accurate for that matter, but it provides a starting point for future investigations.

Comments

Re:Noscript.

[Jack Griffin]

Makes no difference, we're all fucked. Technology is now reaching a point where humans cannot compete with machines.
Your cell phone provider already has enough info to know everywhere you are at any point in time, who your friends and family are, who you call and how often. Google knows all your web habits, and what you hobbies are, and you bank knows every cent you spend, where and on what. And this info is freely bought and sold to marketing companies and other bad actors. It only takes one slip to connect a name to this data and your life is captured on record forever. We need to start preparing for a non-private reality, than try to hang onto any semblance of privacy we think we still have. Even as I type this some algorithm somewhere has already tied my writing style to all my other web aliases and is connecting me to my real identity.
Privacy is dead.

Re:I don't see it.

[Anonymous Coward]

They don't have to. They just have to parade some "experts" in front of a jury and say they're pretty sure they matched your mouse movement to a pedo. Sort of like how the FBI handles hair analysis. If the government wants you gone, this is just another tool in the toolbox.

Re:Guess it's time to

[houghi]

Obviously you need to change the MAC address. The hard part will be not being caught by cameras. Then do it all scripted. e.g. wake up on time X, run the script that changes the mac, connects, sends the messages, recieves the message, shutdown.

For future contact I would use Usenet. Encrypt the message, so it is not readable by everybody. As only the receiver should have the key, he or she will be the only one reading it.
There is no direct link between you and the person receiving it. He could be sitting next to you or on the other side of the world. Post it inside images that others will download for their content in the correct group and they can not follow up on who is downloading it at all. Am I downloading nudes and the hidden message as a result or am I interested in the message and have to download a nude persons image.

Why scripted? That way when you time it correctly, you can have it in your backpack or pocket or anywhere, while you walk around. If it is cheap enough, you could dump it in the trash, where it will activate at time X, do its thing, turn off and be send to the dump.

Not sure what the cheapest wireless device would be that could run a decent script to do this and has an auto-on function in its bios.