English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

We describe a tracking technique for Linux devices, exploiting a new TCPsource port generation mechanism recently introduced to the Linux kernel. Thismechanism is based on an algorithm, standardized in RFC 6056, for boostingsecurity by better randomizing port selection. Our technique detects collisionsin a hash function used in the said algorithm, based on sampling TCP sourceports generated in an attacker-prescribed manner. These hash collisions dependsolely on a per-device key, and thus the set of collisions forms a device IDthat allows tracking devices across browsers, browser privacy modes,containers, and IPv4/IPv6 networks (including some VPNs). It can distinguishamong devices with identical hardware and software, and lasts until the devicerestarts.  We implemented this technique and then tested it using tracking servers intwo different locations and with Linux devices on various networks. We alsotested it on an Android device that we patched to introduce the new portselection algorithm. The tracking technique works in real-life conditions, andwe report detailed findings about it, including its dwell time, scalability,and success rate in different network types. We worked with the Linux kernelteam to mitigate the exploit, resulting in a security patch introduced in May2022 to the Linux kernel, and we provide recommendations for better securingthe port selection algorithm in the paper.

Device Tracking via Linux's New TCP Source Port Selection Algorithm (Extended Version)