[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #27257 [Applications/Tor Browser]: In Tor Browser prefs, "dom.network.enabled" should have been "dom.netinfo.enabled"

#27257: In Tor Browser prefs, "dom.network.enabled" should have been
"dom.netinfo.enabled"
-------------------------------------------------+-------------------------
 Reporter:  arthuredelstein                      |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  closed
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:  tbb-fingerprinting, tbb-mobile,      |  Actual Points:
  ff60-esr, TorBrowserTeam201808R                |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by Thorin):

 dom.netinfo.enabled=false returns "unknown" but RFP returns "undefined"

 You need to decide what you want to enforce as your TBB fingerprint. RFP
 "clashes" with a lot of other prefs you have flipped in the past. You'll
 have to evaluate each one on it's own in order to determine if the pref or
 RFP wins out. Or even which one gives better protection (eg
 media.video_stats.enabled=false disables the API, but RFP returns
 dynamically spoofed values .. so which do you want? which is less entropy
 or fits your threat model)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27257#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs