Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • T Tor Browser
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 1,319
    • Issues 1,319
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 7
    • Merge requests 7
  • Deployments
    • Deployments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Wiki
    • Wiki
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • Applications
  • Tor Browser
  • Issues
  • #19199
Closed
Open
Created May 29, 2016 by cypherpunks@cypherpunks

Allow user to completely disable canvas content and related warning popup from a checkbox in TorButton's "Privacy Settings"

Canvas-based fingerprinting is a potent threat to anonymity. I believe it does not make sense to have it potentially enabled (following a popup dialog) at elevated Security Slider settings, and even with the Security Slider on "High," and probably also on Medium-High, Medium, and potentially Medium-Low.

Fingerprintable canvas content (and its related popup) should be completely disabled when the Security Slider is at one of these elevated settings, and it should be transparent to the user. It may make sense to still present the icon in the address bar so that it can be enabled manually, on a per-site or per-page basis, if a user needs this feature.

Thank you all so much.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking