[tor-bugs] #33849 [Applications/Tor Browser]: Maybe disable Windows Hello

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#33849: Maybe disable Windows Hello
------------------------------------------+----------------------
     Reporter:  pospeselr                 |      Owner:  tbb-team
         Type:  defect                    |     Status:  assigned
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:  #33534
       Points:                            |   Reviewer:
      Sponsor:  Sponsor58                 |
------------------------------------------+----------------------
 If we want to disable Windows Hello and associated biometrics queries in
 Tor Browser it looks like we can patch various
 IsUserVerifyingPlatformAuthenticatorAvailable calls to always return
 false.

 It seems like there was a bit of a refactor to wrap both Windows Hello as
 well hardware tokens like yubikeys(?) into the same authentication system
 so we need to take care to not break support for these.

 See this patch: https://bugzilla.mozilla.org/show_bug.cgi?id=1508115
 The library Mozilla is using to add Windows Hello support:
 https://github.com/Microsoft/webauthn

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33849>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs