[tbb-bugs] #16672 [Tor Browser]: Text rendering allows fingerprinting

[Tor Bug Tracker & Wiki]

#16672: Text rendering allows fingerprinting
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  tbb-team
  arthuredelstein        |     Status:  needs_review
         Type:  defect   |  Milestone:
     Priority:  normal   |    Version:
    Component:  Tor      |   Keywords:  tbb-fingerprinting-fonts, tbb-5.0,
  Browser                |  TorBrowserTeam201508R
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by dcf):

 Replying to [comment:13 arthuredelstein]:
 > Here are some fixup patches for review:
 >
 > There are two commits for tor-browser-bundle.git:
 > https://github.com/arthuredelstein/tor-browser-bundle/commits/16672+1
 > And one commit for tor-browser.git:
 > https://github.com/arthuredelstein/tor-browser/commits/16672+2
 >
 > Builds for testing are available at:
 > https://people.torproject.org/~arthuredelstein/downloads/16672-builds/
 >
 > Obviously I haven't been able to try every OS flavor -- so I'm very
 interested to hear what checksums people get on various systems using
 David's test: https://people.torproject.org/~dcf/fonttest.html

 Checksum: 1-8854c333
 attachment:1-8854c333-2015-08-08.txt​
 attachment:1-8854c333.png
 It seems like the fonts.conf settings are not taking hold--at least the
 rgba one. When I zoom in, I see subpixel antialiasing.

 Different from 5.0a4, the comment:13 bundles have Tor Launcher and the URL
 bar, etc. in a serif font (Tinos I suppose) rather than a monospace one.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16672#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online