[tbb-bugs] #18603 [Applications/Tor Browser]: failIfMajorPerformanceCaveat in a WebGL context might aid in fingerprinting (was: failIfMajorPerformanceCaveat in a WebGL context migth aid in fingerprinting)

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Apr 20 15:06:21 UTC 2016


#18603: failIfMajorPerformanceCaveat in a WebGL context might aid in fingerprinting
--------------------------------------------+--------------------------
 Reporter:  gk                              |          Owner:  mcs
     Type:  task                            |         Status:  assigned
 Priority:  Medium                          |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  ff45-esr, TorBrowserTeam201604  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+--------------------------
Changes (by mcs):

 * status:  new => assigned
 * cc: brade, tbb-team (added)
 * keywords:  ff45-esr => ff45-esr, TorBrowserTeam201604
 * owner:  tbb-team => mcs


Old description:

> https://bugzilla.mozilla.org/show_bug.cgi?id=1164970 implemented
> `failIfMajorPerformanceCaveat` that makes the context creation fail when
> layer acceleration is not supported. We should investigate whether our
> WebGL noramlizing is affected by this.

New description:

 https://bugzilla.mozilla.org/show_bug.cgi?id=1164970 implemented
 `failIfMajorPerformanceCaveat` that makes the context creation fail when
 layer acceleration is not supported. We should investigate whether our
 WebGL normalizing is affected by this.

--

Comment:

 Kathy and I looked at this.  Unless we disable this feature, we think it
 could be used as a fingerprinting vector.  We will create a patch to pref
 it off.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18603#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list