Article 64F07 [$] Fingerprinting systems with TCP source-port selection

[$] Fingerprinting systems with TCP source-port selection

by
corbet
from LWN.net on (#64F07)
Back in May 2022, a mysterious set of patches titled insufficient TCPsource port randomness crossed the mailing lists and was subsequentlymerged (at -rc6) into the 5.18 kernel. Little information was available atthe time about why significant changes to the networking stack needed to bemade so late in the development cycle. That situation hasfinally changed with the publication of this paper by Moshe Kol,Amit Klein, and Yossi Gilad. It seems that the way the kernel chose portnumbers for outgoing network connections made it possible to uniquelyfingerprint users.
External Content
Source RSS or Atom Feed
Feed Location http://lwn.net/headlines/rss
Feed Title LWN.net
Feed Link https://lwn.net/
Reply 0 comments