[tbb-bugs] #30541 [Applications/Tor Browser]: webgl readPixels FP entropy

[Tor Bug Tracker & Wiki]

#30541: webgl readPixels FP entropy
-------------------------------------+-------------------------------------
 Reporter:  Thorin                   |          Owner:  tbb-team
     Type:  defect                   |         Status:  new
 Priority:  Medium                   |      Component:  Applications/Tor
                                     |  Browser
  Version:                           |       Severity:  Normal
 Keywords:  tbb-fingerprinting,      |  Actual Points:
  tbb-fingerprinting-os              |
Parent ID:                           |         Points:
 Reviewer:                           |        Sponsor:
-------------------------------------+-------------------------------------
 **readPixels** is not covered by RFP (see
 https://bugzilla.mozilla.org/show_bug.cgi?id=1428034 ) and using my tests
 [1], on windows I get entropy. Not sure if unique or just OS.

 - Windows 7 32bit
 `2ba61e7e8e370fdbcefb79456e7e944b060f34289af33732aa6eb75af61ff06c`
 - Windows 7 64bit
 `ac9aa378cd16219ecbcb6ec46b57d8a484ac8ad61cbe63c810b40fb2c741e7f3`
 - Windows10 64bit
 `c4ef81818ccaca2c4933f63c45bf5ffaaa7f2233f2761e3c6ba14a9e5cb82c25`

 It seems to be consistent on Linux, and Mac i have no idea: here's some
 data
 - Mint Cinnamon 32/64bit `not supported`
 - Ubuntu GNOME
 `5abc446cce2558be83bfe60baeb6dc7ff2a17635057c4612fe835649e7c77329`
 - Debian GNOME
 `5abc446cce2558be83bfe60baeb6dc7ff2a17635057c4612fe835649e7c77329`
 - Mac 10.14
 `96f2538daa8a0a180f77a13d80ad455a75ae17c5495ce90fa4fd4267cbfd5210`

 So besides windows OS entropy, theres at least two buckets for Linux?

 gk said
 > Interestingly, I get your macOS one on one of my Linux boxes.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30541>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online