Opened 5 years ago

Closed 5 years ago

#16254 closed task (fixed)

Investigate GeoIP-based search results feature in ESR 38

Reported by: gk Owned by: mikeperry
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords: ff38-esr, tbb-fingerprinting, tbb-5.0a3-essential, TorBrowserTeam201506, MikePerry201506, tbb-pref
Cc: mcs Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by gk)

https://bugzilla.mozilla.org/show_bug.cgi?id=1109120 implemented GeoIP-based search defaults including contacting https://location.services.mozilla.com. Moreover, on OS X and Windows OS APIs are used to get that information:

https://bugzilla.mozilla.org/show_bug.cgi?id=1102295
https://bugzilla.mozilla.org/show_bug.cgi?id=1102297

We should investigate possible information leaks and I guess ways to disable/neuter this feature as we ship Disconnect.me with en-US as default.

Child Tickets

Change History (7)

comment:1 Changed 5 years ago by gk

Description: modified (diff)

comment:2 Changed 5 years ago by mcs

Cc: mcs added

Interesting. It looks like we can set a couple of prefs. to cause the lookups to be skipped, e.g.,

pref("browser.search.countryCode", "US");
pref("browser.search.region", "US");

We will want to verify that though.

comment:3 Changed 5 years ago by mikeperry

Keywords: tbb-5.0a3-essential added

Tag the set of things we should aim to understand/fix for the fist FF38-based TBB (5.0a3, on June 30th).

comment:4 Changed 5 years ago by mikeperry

Owner: changed from tbb-team to mikeperry
Status: newassigned

comment:5 Changed 5 years ago by mikeperry

Keywords: TorBrowserTeam201506 MikePerry201506 added

comment:6 Changed 5 years ago by mikeperry

Keywords: tbb-pref added

From looking at fetchCountryCode() in ./toolkit/components/search/nsSearchService.js, it looks like we also need to unset browser.search.geoip.url to the empty string to prevent an XHR GeoIP request.

comment:7 Changed 5 years ago by mikeperry

Resolution: fixed
Status: assignedclosed

I set these prefs for 5.0a3.

Note: See TracTickets for help on using tickets.