[tor-bugs] #12609 [Firefox Patch Issues]: HTML5 fullscreen API makes TB fingerprintable, disable it!

[Tor Bug Tracker & Wiki]

#12609: HTML5 fullscreen API makes TB fingerprintable, disable it!
--------------------------------------+--------------------------------
     Reporter:  cypherpunks           |      Owner:  mikeperry
         Type:  defect                |     Status:  new
     Priority:  critical              |  Milestone:
    Component:  Firefox Patch Issues  |    Version:
   Resolution:                        |   Keywords:  tbb-fingerprinting
Actual Points:                        |  Parent ID:
       Points:                        |
--------------------------------------+--------------------------------

Comment (by cypherpunks):

 Replying to [comment:5 cypherpunks]:
 > Can it fingerprint automatically without click on page visit?

 User interaction (clicks, hover, keyboard, etc.) is supposed to be
 necessary. Not a very high bar, though.

 Replying to [comment:7 cypherpunks]:
 > > Because what the attacker gets is the innerHeight/innerWidth - of a
 full screen window!
 > Why do you think it's inner size? My test reports real_desktop_width x
 (real_desktop_height - 1px).

 Me too (Linux)... I assumed that's some weird GUI toolkit leftover pixel.
 Maybe I'm wrong and it's the same on every platform.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12609#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online