[tor-bugs] #31512 [Applications/Tor Browser]: Fingerprinting of Tor Browser

[Tor Bug Tracker & Wiki]

#31512: Fingerprinting of Tor Browser
--------------------------------------+--------------------------
 Reporter:  thelamper                 |          Owner:  tbb-team
     Type:  enhancement               |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:  invalid
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by Thorin):

 https://brax.me/geo/ fingerprinting is using
 https://github.com/Valve/fingerprintjs2
  - `view-source:https://brax.me/geo/fingerprint2.js`

 There is absolutely nothing new here. I've studied this source in depth

 - webaudio is disabled in TB
 - webgl doesn't render anything: readPixels is disabled but not sure about
 on click to play: sorry: haven't keep up to date on this
 - webgl vendor & renderer are already covered
 - navigator properties reveal OS: see previous comments
 - fonts reveal OS

 Entropy within OS fonts (despite the whitelist) is covered elsewhere

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31512#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online