[tbb-bugs] #9451 [Tor Browser]: de-anonymisation by readable @font-face CSS attribute - TBB settings update

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Sep 4 12:10:40 UTC 2014


#9451: de-anonymisation by readable @font-face CSS attribute - TBB settings update
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  tbb-team
  cypherpunks            |     Status:  new
         Type:  defect   |  Milestone:
     Priority:  normal   |    Version:
    Component:  Tor      |   Keywords:  de-anonymization, TBB, font,
  Browser                |  settings
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by gacar):

 The attack described here won't work because of TBB's font limits (=10).
 After loading or probing 10 fonts, no local font lookup will be made due
 `@font-face` rules.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9451#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list