[tor-bugs] #22950 [Applications/Tor Browser Sandbox]: Filter out X11 root window property queries.

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Jul 16 22:03:19 UTC 2017


#22950: Filter out X11 root window property queries.
----------------------------------------------+-------------------------
 Reporter:  yawning                           |          Owner:  yawning
     Type:  enhancement                       |         Status:  new
 Priority:  Medium                            |      Milestone:
Component:  Applications/Tor Browser Sandbox  |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:  sandbox-fingerprinting            |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+-------------------------
Changes (by yawning):

 * keywords:   => sandbox-fingerprinting


Comment:

 The immediate solution for this is "Use Xephyr", so people that wish to
 avoid this have options already since that's supported and relatively well
 tested.  I am inclined to think that plugging all of the X11 related
 information disclosure issues is futile by virtue of the protocol design
 without basically implementing a full fledged X server.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22950#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list