[tbb-bugs] #16672 [Tor Browser]: Text rendering allows fingerprinting
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Aug 6 07:09:51 UTC 2015
#16672: Text rendering allows fingerprinting
---------------------------+-----------------------------------------------
Reporter: | Owner: tbb-team
arthuredelstein | Status: new
Type: defect | Milestone:
Priority: normal | Version:
Component: Tor | Keywords: tbb-fingerprinting-fonts, tbb-5.0
Browser | Parent ID:
Resolution: |
Actual Points: |
Points: |
---------------------------+-----------------------------------------------
Comment (by dcf):
Replying to [comment:4 arthuredelstein]:
> dcf created a `fonts.conf` files that should help to homogenize
rendering settings across Linux platforms. See
https://trac.torproject.org/projects/tor/ticket/13313#comment:1
>
> Also, he did fantastic work on font/text-rendering fingerprinting,
reported here:
> https://bamsoftware.com/papers/fontfp.pdf
> with a demo described at
https://trac.torproject.org/projects/tor/ticket/13313#comment:16
>
> David, do you think there might be anything in the raw data from your
survey that would help us to identify fingerprintable glyph rendering
settings?
The main things are hinting and antialiasing settings. The other thing was
people having different versions of the same named font (different
versions of Verdana, for example). But that should be prevented by font
file whitelisting.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16672#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list