[tbb-bugs] #13313 [Tor Browser]: Enable bundled fonts in Tor Browser
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Jul 27 04:39:46 UTC 2015
#13313: Enable bundled fonts in Tor Browser
-------------------------+-------------------------------------------------
Reporter: dcf | Owner: tbb-team
Type: | Status: needs_review
enhancement | Milestone:
Priority: normal | Version:
Component: Tor | Keywords: tbb-fingerprinting-fonts,
Browser | tbb-5.0a4, TorBrowserTeam201507R
Resolution: | Parent ID:
Actual Points: |
Points: |
-------------------------+-------------------------------------------------
Comment (by arthuredelstein):
Replying to [comment:24 gk]:
> Replying to [comment:16 dcf]:
> > There's also a demo at
> > https://www.bamsoftware.com/talks/fc15-fontfp/fontfp.html#demo
>
> I just tested that on two 32bit Linux systems (one Ubuntu 12.04 and one
Debian testing) and even there are differeces visible with bundled fonts
(the diff is attached). I guess this means shipping the alpha with it is
fine (it can't get worse wrt to the status quo :) ) but we might want to
have an estimation about what the current solution really helps us for the
stable series before we ship it there.
Whoa, interesting result. I think, though, that it's a form of OS
fingerprinting, similar to #13018, or am I missing something? Whereas this
ticket attempts to solve an orthogonal problem, which is that it is
possible to enumerate the system fonts installed on a user's machine.
Also, I *think* measuring glyph sizes is only possible with JS activated,
whereas enumerating fonts is possible using CSS alone.
(I've opened #16672 regarding differences in text rendering between
operating systems.)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13313#comment:26>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list