[tbb-bugs] #8725 [Tor Browser]: resource:// URIs leak information

Thu Jan 7 20:00:17 UTC 2016

#8725: resource:// URIs leak information
-------------------------------------------------+-------------------------
 Reporter:  holizz                               |          Owner:  tbb-
     Type:  defect                               |  team
 Priority:  High                                 |         Status:  new
Component:  Tor Browser                          |      Milestone:
 Severity:  Normal                               |        Version:
 Keywords:  tbb-fingerprinting, tbb-rebase-      |     Resolution:
  regression, tbb-testcase, tbb-firefox-patch    |  Actual Points:
Parent ID:                                       |         Points:
  Sponsor:                                       |
-------------------------------------------------+-------------------------
Changes (by cypherpunks):

 * severity:   => Normal

Comment:

 [https://www.browserleaks.com/firefox This test] shows the bug still
 exists in current version of the TBB. If JS is enabled, the type of
 platform is leaked. Adversary can distinguish Windows and Linux users.

 Maybe canvas [https://www.browserleaks.com/canvas have the same problem]
 making unique fingerprint for everybody.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8725#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online