Skip to content

GitLab

Trac
Trac

GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.

Closed (moved)
Opened by Georg Koppen@gk

Investigate impact of fingerprinting via getClientRects()

http://jcarlosnorte.com/security/2016/03/06/advanced-tor-browser-fingerprinting.html claims that getClientRects() provides a lot of differences between two computers. This is "[d]epending on the resolution, font configuration and lots of other factors".

We should investigate how problematic that method is keeping in mind that we are currently not aiming at hiding the platform a user is on and that we do font normalization and rounding of the content window on start-up and a bunch of other things.

I asked the author of the blog post to explain the differences on the two computers he got, taking the things I mentioned above into account but we got no reply so far.

To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information