[tor-bugs] #10833 [Firefox Patch Issues]: Screen resolution should not be identical to window size

[Tor Bug Tracker & Wiki]

#10833: Screen resolution should not be identical to window size
--------------------------------------+-----------------------
     Reporter:  ben                   |      Owner:  mikeperry
         Type:  defect                |     Status:  closed
     Priority:  normal                |  Milestone:
    Component:  Firefox Patch Issues  |    Version:
   Resolution:  duplicate             |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |
--------------------------------------+-----------------------

Comment (by mikeperry):

 Replying to [comment:10 ben]:
 > There is no discussion about whether this is a bug or serious: I
 //proved// that in comment:6.

 I've discussed the panopticlick issue at length before. See my comments on
 #4810,
 https://blog.torproject.org/blog/effs-panopticlick-and-torbutton, and
 #6119.

 We make our decisions about fingerprinting based on the concept of entropy
 reduction *inside* the TBB userbase. It is not possible to both defend
 against fingerprinting *and* prevent TBB from being detected as TBB.


 > Content size is a problem, too, but a different issue.
 >
 > > > Then, pick the smallest that can fit the current window size.
 > > 4:3, 5:4, 14:9, 16:9, 16:10, for which one?
 >
 > Doesn't matter. In fact, we can simply //always// report 1920x1080.
 Unless the window is bigger, and then report some even higher screen res.

 First, there are websites out there that will try to resize browser
 windows to the whole desktop resolution, or to a fraction of the desktop
 resolution.

 Further, reporting multiple resolutions for the desktop actually
 introduces *more* fingerprintable entropy. In fact, people with larger
 than 1920x1080 displays will necessarily stand out with your suggestion.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10833#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online