[tbb-bugs] #33849 [Applications/Tor Browser]: Maybe disable Windows Hello

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Apr 8 19:31:42 UTC 2020


#33849: Maybe disable Windows Hello
------------------------------------------+----------------------
     Reporter:  pospeselr                 |      Owner:  tbb-team
         Type:  defect                    |     Status:  assigned
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:  #33534
       Points:                            |   Reviewer:
      Sponsor:  Sponsor58                 |
------------------------------------------+----------------------
 If we want to disable Windows Hello and associated biometrics queries in
 Tor Browser it looks like we can patch various
 IsUserVerifyingPlatformAuthenticatorAvailable calls to always return
 false.

 It seems like there was a bit of a refactor to wrap both Windows Hello as
 well hardware tokens like yubikeys(?) into the same authentication system
 so we need to take care to not break support for these.

 See this patch: https://bugzilla.mozilla.org/show_bug.cgi?id=1508115
 The library Mozilla is using to add Windows Hello support:
 https://github.com/Microsoft/webauthn

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33849>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list