[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #16110 [Tor Browser]: Improve Time Resolution Defense

#16110: Improve Time Resolution Defense
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  mikeperry
  mikeperry              |     Status:  assigned
         Type:  defect   |  Milestone:
     Priority:  normal   |    Version:
    Component:  Tor      |   Keywords:  ff38-esr, tbb-fingerprinting-time-
  Browser                |  highres, tbb-5.0a-highrisk,
   Resolution:           |  TorBrowserTeam201506, MikePerry201506
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------

Comment (by mikeperry):

 Replying to [comment:10 mcs]:
 > Replying to [comment:9 mikeperry]:
 > > This pref might be a lie. I still see AnimationPlayer in my JS
 console. I'll need to write a proper test to try to use it...
 >
 > It looks like that pref. should work.  Are you sure your test document
 is not privileged?  See:
 >
 > http://mxr.mozilla.org/mozilla-esr38/source/dom/base/nsDocument.cpp#3311
 >
 > I tested with Firefox 38.0.1 ESR on Mac OS with dom.animations-
 api.core.enabled=false and I only saw AnimationEvent.  When I changed that
 pref. to true I saw a bunch more stuff:
 >  AnimationTimeline
 >  AnimationPlayer
 >  AnimationEffect
 >  Animation

 Ah, right, I was only testing about: windows, which were privileged.
 Apparently the webidl for these APIs has a special check for a function
 that enables access to chrome code. Thanks.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16110#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs