[tor-talk] Tor browser can be fingerprinted

[Michael Wolf]

On 9/16/2013 5:45 AM, Alexandre Guillioud wrote:
> "Also it is worth mentioning that disabling Javascript does not protect
> against this type of fingerprinting, as it is available to CSS too:
> https://developer.mozilla.org/en-US/docs/Web/Guide/CSS/Media_queries"
> 
> It could be available to css, but without javascript, it can't be sended !
> 

Not true.  The media query can be designed such that certain resources
(like an image or webfont) are only loaded when the screen is a certain
size.  The web server would then be able to determine what size the
screen was based on which resources the browser requested.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 834 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20130916/d7fedddc/attachment.sig>