[tor-bugs] #29051 [Applications/Tor Browser]: backport 1446472 - privacy.resistFingerprinting is true blocks QR code (canvas) on web.whatsapp.com without any notice

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Jan 11 07:55:46 UTC 2019


#29051: backport 1446472 - privacy.resistFingerprinting is true blocks QR code
(canvas) on web.whatsapp.com without any notice
--------------------------------------+----------------------------
 Reporter:  pospeselr                 |          Owner:  pospeselr
     Type:  defect                    |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:  worksforme
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+----------------------------

Comment (by tom):

 To answer your question from irc, pospeselr: If the canvas extraction
 isn't trigger by user input, you should see an icon in the url bar but no
 doorhanger.  Once it's triggered from user input - doorhanger appears. I
 made https://ritter.vg/misc/ff/canvas.html for simple testing.

 This assumes
 privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts is 'true'
 (in Tor Browser currently it is false).

 This ticket is probably still valid, I hope that this improvement is
 enough for Tor to consider flipping it back to 'true'. (Which I think is a
 better overall experience, even if it does make WhatsApp more confusing?)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29051#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list