[tbb-bugs] #31504 [Applications/Tor Browser]: Disable

[Tor Bug Tracker & Wiki]

#31504: Disable
--------------------------------------+-----------------------------------
 Reporter:  cyperpunks                |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  Immediate                 |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Critical                  |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by Thorin):

 Replying to [ticket:31504 cyperpunks]:
 > while other Tor user have en,en-US

 AFAICT, this is incorrect. The default for en-US builds is `en-US, en`.
 Non en-US builds start with `en-US, en` and after the prompt (if you click
 yes *or* no) it stays as `en-US, en`. If you clicked yes, the language
 list is disabled. If you clicked no, the language list is enabled and you
 can add your preferred language

 ---

 Flipping `privacy.spoof_english` from either about:config or by using the
 mentioned checkbox, also flips `javascript.use_us_english_locale`. And
 either way you do it, all but `en-US, en` in the language list is removed
 and the order is reset to `en-US, en`.

 When `spoof_english` = `1`, then users must be able to add their language
 etc: usability: the language list is enabled

 When `spoof_english = `2`, the language list is disabled (**and** reset).

 However, there is **no such protection** for en-US builds, because
 `spoof_english` is never used - this is where you easily change your
 fingerprint: i.e it is not locked down and I'm sure that this is where OP
 screwed it up

 @gk ... could we tighten up en-US builds? ... your move! :)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31504#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online