Page 1 of 1

Firefox Reveals My System's Time; Need to Obfuscate

Posted: Tue Mar 14, 2017 12:15 pm
by aliwon
Hi there !

Whoer is able to detect my real timezone while I'm using any CryptoStorm Node. Is there a way to either stop my system's time being displayed or change it to match the VPN Node's local time ?

Thanks.

Screenshot from 2017-03-14 14-57-31.png
TimeZone Mismatch

Re: Firefox Reveals My System's Time; Need to Obfuscate

Posted: Thu Mar 16, 2017 4:47 am
by parityboy
@OP

I just tested this - it's a Javascript issue, so a short term fix would be to simply disable Javascript.

Re: Firefox Reveals My System's Time; Need to Obfuscate

Posted: Thu Mar 16, 2017 10:22 am
by aliwon
parityboy wrote:@OP

I just tested this - it's a Javascript issue, so a short term fix would be to simply disable Javascript.


Thanks, but what about sites that do need JavaScript ?

Although I use both uBlock Origin and uMatrix for fine-grained control of scripts, I'm still unable to target the appropriate one.

I've tried Random Agent Spoofer, unfortunately their current version doesn't support timezone spoofing.

Re: Firefox Reveals My System's Time; Need to Obfuscate

Posted: Fri Mar 17, 2017 4:59 pm
by parityboy
@OP

It may be that the script in question is hosted on the site, or embedded in the page. It might be worth examining the page source to see if you can see it.

Re: Firefox Reveals My System's Time; Need to Obfuscate

Posted: Sun Mar 26, 2017 6:04 am
by marzametal
Change your system time, it will do the trick. Just match it to the VPN exit node.

Then add another clock in the "Additional Clock" tab to reflect your real location time. So when you hover your mouse over the time/date section, it will pop up a box showing both local time and additional clock time.

Re: Firefox Reveals My System's Time; Need to Obfuscate

Posted: Tue Mar 28, 2017 4:07 pm
by aliwon
marzametal wrote:Change your system time, it will do the trick. Just match it to the VPN exit node.

Then add another clock in the "Additional Clock" tab to reflect your real location time. So when you hover your mouse over the time/date section, it will pop up a box showing both local time and additional clock time.


Changing the system's time obviously works, but very tedious. Firefox's sampling the system's time somewhere though. Need to figure this out guys.

Re: Firefox Reveals My System's Time; Need to Obfuscate

Posted: Wed Mar 29, 2017 8:00 am
by Khariz
according to this thread, you can't: https://www.wilderssecurity.com/threads ... is.292455/

Re: Firefox Reveals My System's Time; Need to Obfuscate

Posted: Wed Mar 29, 2017 10:35 am
by aliwon
marzametal wrote:Change your system time, it will do the trick. Just match it to the VPN exit node.

Then add another clock in the "Additional Clock" tab to reflect your real location time. So when you hover your mouse over the time/date section, it will pop up a box showing both local time and additional clock time.



Now I remember why I hadn't done this before. Changing the system is a VERY bad idea. If you create files on the system you're on, or backing-up files, or syncing etc. you need the correct time-stamps.

There's got to be a better way. This is in fact a big bug, but who's going to take responsibility for it ?

OpenVPN, Firefox, and the VPN service provider are all stakeholders here.

Re: Firefox Reveals My System's Time; Need to Obfuscate

Posted: Wed Mar 29, 2017 12:25 pm
by anothernoob
Kid, this is not a VPN issue.
This is a JAVASCRIPT thing. You connect trough SSL in most websites.

Would be WORST if the vpn made a javascript filter just for this.

If a VPN could access and change some javascript inside my HTTPS tunnel... That would worry me.
There is NO VPN IN THE WORLD that changes your system time, so don't ask them here like they were responsible.

If you need that kinda protection, you better use a VIRTUAL MACHINE IN NAT with vpn at HOST. Then put vpn time inside it.
That is the only way it won`t leak.

Even in TOR BROWSER you should NOT USE javascript. If you want, and need, you must change your system time.

Re: Firefox Reveals My System's Time; Need to Obfuscate

Posted: Wed Apr 05, 2017 8:30 am
by aliwon
anothernoob wrote:
There is NO VPN IN THE WORLD that changes your system time, so don't ask them here like they were responsible.


I'd agree with you, but then no one's asking for this. You're upset about imaginary requests.

anothernoob wrote:Kid, this is not a VPN issue.
If you need that kinda protection, you better use a VIRTUAL MACHINE IN NAT with vpn at HOST. Then put vpn time inside it.
That is the only way it won`t leak.

Even in TOR BROWSER you should NOT USE javascript. If you want, and need, you must change your system time.


Nope Kid :D , TorBrowser works fine out-of-the-box. Also, if you look through the posts above FF's Random Agent Spoofer addon could perform timezone spoofing until recently.

There's no need for a VM, that's just overkill.

Re: Firefox Reveals My System's Time; Need to Obfuscate

Posted: Wed Apr 05, 2017 10:12 am
by aliwon
TorBrowser with uBlock turned off, my real location remains obfuscated. Sometimes TB completely conceals it, and at other times it fakes it. :thumbup: