[tor-bugs] #31206 [Applications/Tor Browser]: http://ip-check.info detects browser window size with JS disabled

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Jul 19 15:52:12 UTC 2019


#31206: http://ip-check.info detects browser window size with JS disabled
--------------------------------------+--------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  reopened
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Critical                  |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cypherpunks):

 Replying to [comment:9 cypherpunks]:
 > > Breaks a lot of sites
 >
 > So does disabling JS but when anonymity is top priority usability backs
 off. Having it as an option in "Safest" security level would fit.
 JS is enabled by default and the security slider is, well, a "security"
 slider, the stuff that is disabled depends (among other things) on the
 number of CVEs that impact a certain thing, no such procedure may exist
 for the `@media` CSS component, but yes it does exist for the JS
 interpreter.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31206#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list