Anonimity, localizing device on internet behind firewall

Tuesday, 08 March 2005 21:54

Another scary news ...even If you are behind a firewall, it is possible to fingerprint (identifying) Your computer...yes we may be not alone :-)

The technique works by "exploiting small, microscopic deviations in device hardware: clock skews." In practice, Kohno's paper says, his techniques "exploit the fact that most modern TCP stacks implement the TCP timestamps option from RFC 1323 whereby, for performance purposes, each party in a TCP flow includes information about its perception of time in each outgoing packet. A fingerprinter can use the information contained within the TCP headers to estimate a device's clock skew and thereby fingerprint a physical device. Read more at news.com