[tor-bugs] #18283 [- Select a component]: Usage of native GUI controls for web content rendering allows fingerprinting

[Tor Bug Tracker & Wiki]

#18283: Usage of native GUI controls for web content rendering allows
fingerprinting
--------------------------------------+-----------------
     Reporter:  cypherpunks           |      Owner:
         Type:  defect                |     Status:  new
     Priority:  Medium                |  Milestone:
    Component:  - Select a component  |    Version:
     Severity:  Normal                |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |    Sponsor:
--------------------------------------+-----------------
 TBB is using native OS GUI controls in Web content (scrollbars, check
 boxes, comba boxes, ...).

 If a user has customized the OS UI settings (e.g. scrollbar size) or
 installed a custom OS theme, a web page can detect the different control
 metrics.

 This applies at least on Windows. On Linux, TBB appears to ignore the GTK
 OS config.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18283>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online