[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #16267 [Tor Browser]: NoCaptcha Recaptcha is not working because of canvas fingerprint blocking

#16267: NoCaptcha Recaptcha is not working because of canvas fingerprint blocking
-----------------------------+-----------------------------------
     Reporter:  szgal        |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-usability-website
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------------------------

Comment (by cypherpunks):

 >it draws images to a canvas and then uses toDataUrl()
 A, yeh, really.

 I thinked a bit and now I know how to fix canvas fingerprinting for
 toDataUrl.

 1 toDataUrl must return not data: URI, but a blob: URI. It won't break
 sites which use this URI to show the image to the user, but it will
 disallow to derive pixel data from it.
 2 It must be only allowed to be used as an URI for image: in CSS, as src
 for IMG, etc. Using it in XHR or anything other than image must be
 disallowed.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16267#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs