Skip to content
GitLab
  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • T Tor Browser
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 1,004
    • Issues 1,004
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 3
    • Merge requests 3
  • Deployments
    • Deployments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Wiki
    • Wiki
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • Applications
  • Tor Browser
  • Issues
  • #30542
Closed
Open
Created May 20, 2019 by Thorin@thorin🌀

Investigate fingerprinting capability of viewport API

I am not sure if this is an issue for TB. I do not have a touch device on which to install TB8. But since Tor Uplift's RFP underlines this protection, it might be prudent for someone to check it out.

My Android has a low screen res, the web content loads at a higher res - when I pinch to zoom and re-run/refresh: the viewport shows entropy. Ignore the css media measurements. Just focus on the five JS results: screen, available screen, outer, inner and viewport

Control

  • device should not be hidpi/retina/whatever-you-call-it
  • load test page [1]
  • all the widths/heights (except viewport: e.g 17px less width) should be the same (i.e 1000 x 1000)
  • zoom in to 133%
  • refresh or rerun button
  • all the widths/heights (except viewport e.g 13px less width) should be the same (e.g 750 x 750)

STR

  • device should be hidpi
  • load the test page
  • all the widths/heights (except viewport) should be the same (e.g 980 x 1522)
  • zoom in (fingers on a touch device)
  • scroll to the left and hit re-run tests
  • scroll back to the right and viewport is still based on the old value
  • also, in the pic in [2] css media still shows it's using the old values (980) (ignore that it's missing the height values: not sure why it does that: I think it's because it hits a fraction, I see the same thing on desktop)

Is this just a quirk? Or is the viewport not properly spoofed in all situations?

[1] https://ghacksuserjs.github.io/TorZillaPrint/TorZillaPrint.html#screen [2] https://github.com/ghacksuserjs/TorZillaPrint/issues/34

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking