[tor-bugs] #16672 [Tor Browser]: Text rendering allows fingerprinting

[Tor Bug Tracker & Wiki]

#16672: Text rendering allows fingerprinting
---------------------------+-----------------------------------------------
     Reporter:             |      Owner:  tbb-team
  arthuredelstein          |     Status:  new
         Type:  defect     |  Milestone:
     Priority:  normal     |    Version:
    Component:  Tor        |   Keywords:  tbb-fingerprinting-fonts, tbb-5.0
  Browser                  |  Parent ID:
   Resolution:             |
Actual Points:             |
       Points:             |
---------------------------+-----------------------------------------------

Comment (by dcf):

 Replying to [comment:4 arthuredelstein]:
 > dcf created a `fonts.conf` files that should help to homogenize
 rendering settings across Linux platforms. See
 https://trac.torproject.org/projects/tor/ticket/13313#comment:1
 >
 > Also, he did fantastic work on font/text-rendering fingerprinting,
 reported here:
 > https://bamsoftware.com/papers/fontfp.pdf
 > with a demo described at
 https://trac.torproject.org/projects/tor/ticket/13313#comment:16
 >
 > David, do you think there might be anything in the raw data from your
 survey that would help us to identify fingerprintable glyph rendering
 settings?

 The main things are hinting and antialiasing settings. The other thing was
 people having different versions of the same named font (different
 versions of Verdana, for example). But that should be prevented by font
 file whitelisting.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16672#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online