[tbb-bugs] #30543 [Applications/Tor Browser]: device orientation leaks

[Tor Bug Tracker & Wiki]

#30543: device orientation leaks
--------------------------------------------+--------------------------
 Reporter:  Thorin                          |          Owner:  tbb-team
     Type:  defect                          |         Status:  new
 Priority:  Medium                          |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  tbb-fingerprinting, tbb-mobile  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+--------------------------

Comment (by Thorin):

 Orientation wouldn't even be a stable metric, IMO: and most mobile device
 users would orientate the same per site: i.e it is driven by content? I've
 never seen it in any fp scripts, TBH.

 I'm not hardware savvy: but do laptop and desktop support this, e.g with
 rotating screens. We could ignore android, and only apply orientation to
 win/mac/linux. i.e least apply landscape to `css media orientation` like
 we do for the two `css media resolutions`. matchMedia I'm not sure about.
 And their will be other methods, I'm sure.

 Or we could not bother. Going full screen will leak orientation. A lot of
 desktop/laptop users (I assume, once letterboxing is implemented: even if
 that only enhances rather than replaces new win sizes) will go FS,
 maximize, or resize to match orientation to get real estate usage: i.e
 inner window = your orientation. So I think it may be a losing battle. I
 also wonder how much this may affect functionality on some sites. And
 lastly, the solution IMO is Tor uptake: e.g tripling the user base etc
 simplistically negates what we do here now.

 +1 for not spoofing orientation

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30543#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online