[tor-bugs] #13313 [Tor Browser]: Enable bundled fonts in Tor Browser

[Tor Bug Tracker & Wiki]

#13313: Enable bundled fonts in Tor Browser
-------------------------+-------------------------------------------------
     Reporter:  dcf      |      Owner:  tbb-team
         Type:           |     Status:  needs_review
  enhancement            |  Milestone:
     Priority:  normal   |    Version:
    Component:  Tor      |   Keywords:  tbb-fingerprinting-fonts,
  Browser                |  tbb-5.0a4, TorBrowserTeam201507R
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by arthuredelstein):

 Replying to [comment:24 gk]:
 > Replying to [comment:16 dcf]:
 > > There's also a demo at
 > > https://www.bamsoftware.com/talks/fc15-fontfp/fontfp.html#demo
 >
 > I just tested that on two 32bit Linux systems (one Ubuntu 12.04 and one
 Debian testing) and even there are differeces visible with bundled fonts
 (the diff is attached). I guess this means shipping the alpha with it is
 fine (it can't get worse wrt to the status quo :) ) but we might want to
 have an estimation about what the current solution really helps us for the
 stable series before we ship it there.

 Whoa, interesting result. I think, though, that it's a form of OS
 fingerprinting, similar to #13018, or am I missing something? Whereas this
 ticket attempts to solve an orthogonal problem, which is that it is
 possible to enumerate the system fonts installed on a user's machine.

 Also, I *think* measuring glyph sizes is only possible with JS activated,
 whereas enumerating fonts is possible using CSS alone.

 (I've opened #16672 regarding differences in text rendering between
 operating systems.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13313#comment:26>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online