From f37fcebc2cb62cc9d34f867a7ed4286b9211e4c2 Mon Sep 17 00:00:00 2001 From: pyllyukko Date: Mon, 20 Feb 2017 19:57:43 +0200 Subject: [PATCH] dom.enable_user_timing -> false Hopefully this would also mitigate against ASLR^Cache (AnC) See: http://www.cs.vu.nl//~herbertb/download/papers/anc_ndss17.pdf --- user.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/user.js b/user.js index b59e741c..d139d879 100644 --- a/user.js +++ b/user.js @@ -19,6 +19,10 @@ * * ******************************************************************************/ +// Make sure the User Timing API does not provide a new high resolution timestamp +// https://trac.torproject.org/projects/tor/ticket/16336 +user_pref("dom.enable_user_timing", false); + // Disable "Are you sure you want to leave this page?" popups // https://support.mozilla.org/en-US/questions/1043508 user_pref("dom.disable_beforeunload", true);