Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
Trac
Trac
  • Project overview
    • Project overview
    • Details
    • Activity
  • Issues 246
    • Issues 246
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Operations
    • Operations
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value Stream
  • Wiki
    • Wiki
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Create a new issue
  • Issue Boards

GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.

  • Legacy
  • TracTrac
  • Issues
  • #29348

Closed (moved)
Open
Opened Feb 06, 2019 by Trac@tracbot

Add userChrome to Tor Browser to spoof scrollbars to reduce fingerprinting surface

We all know that different systems have different scrollbars. I looked it up right now and Tor browser reports this values for the screen object:

width 1000 height 900 clientWidth 988 (yes I am on Linux)

I found this userChrome ( https://gist.github.com/mrkwatz/277fb19d210a7539304ca2388f24d8e3 ) and it makes the clientWidth become 1000 as intended (you obviously could also make the scrollbars the same width/height as on Windows, but I think this is a better approach). If something like this is included into standard Tor browser it would minimize segregation and thus allow users to use Tor on Linux/Mac while still appearing as Windows users.

Though keep in mind that (for whatever reason) Tor reports different values for the useragent in the HTTP header (Windows) and the JS navigator obj (Linux). This is strange but irrelevant for fingerprinting if the scrollbar thing is not tackled since it is the same result for anyone else. It would get relevant though if Tor applied the custom scrollbars.

Trac:
Username: concerneduser

To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: legacy/trac#29348