Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • Tor Browser Tor Browser
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 880
    • Issues 880
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 16
    • Merge requests 16
  • Deployments
    • Deployments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Wiki
    • Wiki
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • Applications
  • Tor BrowserTor Browser
  • Issues
  • #31997
Closed
Open
Issue created Oct 08, 2019 by Georg Koppen@gkDeveloper

Investigate possible fingerprinting means via the Streams API

The Streams API landed in Firefox 65 allowing JavaScript to process raw data bit-by-bit as soon as it is available on the client side.

The fingerprinting concerns that immediately jump out here are triggered by

There are more advantages too — you can detect when streams start or end, chain streams together, handle errors and cancel streams as required, and react to the speed of the stream is being read at.

We need to check how fine-grained the timers are for starting/ending streams or whether one could get fingerprinted by how fast the client side can process incoming data. There might be more.

The concerns are somewhat mitigated as the big win by combining that API with ServiceWorkers is not available to Firefox 68 ESR.

The bug where this got enabled is: https://bugzilla.mozilla.org/show_bug.cgi?id=1505122.

Assignee
Assign to
Time tracking