News for hackers. Stuff that matters.
Re:Privacy analysis of Tiktok’s app and website by ldjb on Friday December 06, 2019 @04:15PM (#21726050)
I'm guessing they're using the Web Audio API which allows you to generate audio samples:

https://developer.mozilla.org/en-US/docs/Web/API/Web_Audio_A...

Re:Privacy analysis of Tiktok’s app and website by munk-a on Friday December 06, 2019 @05:11PM (#21726508)
And I assume that different audio drivers and software will produce minutely different outputs. It's also possible that they're queueing a sound to be played then canceling the sound after reading the raw computed signal out of the buffer.

Sleezy sleezy crap.

Re:Privacy analysis of Tiktok’s app and website by mmcwilliams on Friday December 06, 2019 @06:05PM (#21726921)
It was my understanding that these methods profile performance of the API which will execute at different speeds on different devices. The samples themselves shouldn't be different if they're using AudioBuffer and typed arrays.
Re:Privacy analysis of Tiktok’s app and website by sudosysgen on Friday December 06, 2019 @10:26PM (#21728266)
Time to add random delay and noise then.
Re:Privacy analysis of Tiktok’s app and website by mmcwilliams on Saturday December 07, 2019 @03:10PM (#21732286)
True, but I think the technique points to the way that other timing attacks used as fingerprinting vectors can and will work. Profiling performance of network requests, image rendering time, etc will always be risks unless all Javascript features employ that kind of mitigation.
Re:Privacy analysis of Tiktok’s app and website by wizzwizz4 on Saturday December 07, 2019 @08:44AM (#21730236)
I believe Firefox adds random delays, if you enable one of the Tracking Protection settings.