[tor-bugs] #10286 [Applications/Tor Browser]: Touch events leak absolute screen coordinates

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu May 11 23:58:53 UTC 2017


#10286: Touch events leak absolute screen coordinates
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:
                                                 |  arthuredelstein
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-fingerprinting-resolution,       |  Actual Points:
  ff52-esr, tbb-testcase, tbb-firefox-patch,     |
  tbb-7.0-must-alpha, TorBrowserTeam201705R      |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  Sponsor4
-------------------------------------------------+-------------------------

Comment (by mcs):

 Replying to [comment:31 mcs]:
 > I am not yet sure why the failures are occuring. Unfortunately I am out
 of time for now, but I will try to investigate more later tonight or early
 tomorrow.

 The test failures occurred in the "fingerprinting resistance off" case.
 Kathy came up with a good theory: maybe the doubling of the radius
 occurred because I ran the tests on a Mac with a Retina (2x) display. If
 that is what is happening, this seems like a Firefox bug (maybe in the
 test code that synthesizes events?) since all distance units within the
 Touch Events are supposed to be CSS pixels. This should not prevent us
 from merging these patches.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10286#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list