Windows users running the Tor browser can be tricked into uncloaking themselves, with a pretty straightforward trick based on Microsoft's DRM system. <\/p>\n
The discovery was made by Hacker House, which says it's been researching social engineering attacks made using DRM-protected content. <\/p>\n
What the UK-based security outfit found is that a pretty straightforward bit of social engineering click on this media file can, at the very least, reveal the user's real IP address. <\/p>\n
Here's what's going on: DRM-protected media has to fetch its licence key from a server. If it's not signed properly, Windows raises a dialogue to warn you. <\/p>\n
However, this warning DOES NOT appear if the DRM license has been signed correctly and the Digital Signature Object, Content Encryption Object and Extended Content Encryption Object contain the appropriate cryptographic signing performed by an authorised Microsoft License Server profile, the author writes. <\/p>\n
Hide this dialogue, capture a Tor user's IP address <\/p>\n
Microsoft sets high barriers to entry for those who want to start signing media: If you want to build your own Microsoft DRM signing solution the price-tag is around US$10,000, Hacker House notes. <\/p>\n
What they've seen in the wild is someone managing to generate signed content, apparently without paying that toll. <\/p>\n
As these signed WMV files do not present any alert to a user before opening them they can be used quite effectively to decloak users of the popular privacy tool TorBrowser with very little warning, they write. <\/p>\n
The risk that media files could expose users is known to Tor, which warns users to run Tails if they want to run media files. <\/p>\n
It's not the first time people have seen social engineering attacks based on media files: the old you need a plug-in to play this file strategy had a Windows DRM variant back in 2013, according to Virus Total. <\/p>\n
<\/p>\n
See the rest here: Windows users running the Tor browser can be tricked into uncloaking themselves, with a pretty straightforward trick based on Microsoft's DRM system. Continue reading
\nMicrosoft's DRM can expose Windows-on-Tor users' IP address - The Register<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"