[tbb-bugs] #16760 [Tor Browser]: TBB leaking window size with CSS only

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Aug 11 09:51:03 UTC 2015


#16760: TBB leaking window size with CSS only
-----------------------------+----------------------
     Reporter:  cypherpunks  |      Owner:  tbb-team
         Type:  defect       |     Status:  closed
     Priority:  major        |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:  worksforme   |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------
Changes (by gk):

 * status:  new => closed
 * resolution:   => worksforme


Comment:

 Replying to [ticket:16760 cypherpunks]:
 > You can determine a user's window size with CSS only. See
 https://arthuredelstein.github.io/tordemos/media-query-fingerprint.html
 for a live demo. I just tested in Tor Browser and it can still show me my
 window size with security slider on high and all scripts disabled.

 Works for me. The test shows a window size rounded to multiples of 200 or
 100 as it should. My guess is that you resized your window and then did
 the test. This case is not handled yet. See: #14429 for work-in-progress
 in this area.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16760#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list