[tbb-dev] Exposing TB as Tor Browser
Tom Ritter
tom at ritter.vg
Fri Nov 3 19:05:29 UTC 2017
Background: Firefox added the Canvas Permission Prompt, people turned
it on. They discovered that blog.mozilla.com was triggering it,
investigated. Tracked it down to Wordpress, by default, using canvas
to figure out if the user has emoji support. Fairly innocuous use, not
for tracking.
Wordpress would like to detect Tor Browser so it doesn't perform the
check and therefore doesn't pop the prompt. This would significantly
reduce the number of prompts Tor Browser users are seeing. The (old)
ticket is here: https://trac.torproject.org/projects/tor/ticket/18195
Other links:
Original WP ticket: https://core.trac.wordpress.org/ticket/32138
Mozilla Ticket: https://bugzilla.mozilla.org/show_bug.cgi?id=1413182
New WP Ticket: https://core.trac.wordpress.org/ticket/42428
Is this something TB would take as a patch?
-tom
PS: Unless FF with privacy.resistFingerprinting identified itself as
Tor Browser, this wouldn't help FF, just TB. But maybe FF _should_
identify itself as TB if TB starts identifying itself as TB?
More information about the tbb-dev
mailing list