Conscript your friends into larger anonymity sets with JavaScript

  • Authors:
  • Henry Corrigan-Gibbs;Bryan Ford

  • Affiliations:
  • Stanford University, Stanford, CA, USA;Yale University, New Haven, CT, USA

  • Venue:
  • Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

We present the design and prototype implementation of ConScript, a framework for using JavaScript to encourage casual Web users to participate in an anonymous communication system. When a Web user visits a cooperative Web site, the site serves a JavaScript application that instructs the browser to create and submit "dummy" messages into the anonymity system. Users who want to send non-dummy messages through the anonymity system use a browser plug-in to replace these dummy messages with real messages. Creating such conscripted anonymity sets can increase the anonymity set size available to users of remailer, e-voting, and verifiable shuffle-style anonymity systems. We outline ConScript's architecture, we address a number of potential attacks against ConScript, and we discuss the ethical issues related to deploying such a system. Our implementation results demonstrate the practicality of ConScript: a workstation running our prototype ConScript JavaScript client generates a dummy message for a mix-net in 81 milliseconds and it generates a dummy message for a DoS-resistant DC-net in 156 milliseconds.