Opened 4 years ago

Last modified 2 months ago

#18598 assigned task

Make sure speech recognition is disabled by default (WebSpeech API)

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-fingerprinting, ff78-esr
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor: Sponsor44-can

Description

We should make sure speech recognition is disabled by default (media.webspeech.recognition.enables). Not sure about speech synthesis (media.webspeech.synth.enabled) yet. Both preferences are off by default on ESR45.

Child Tickets

Change History (17)

comment:1 Changed 3 years ago by gk

Keywords: tbb-7.0-must added

Adding tickets to our 7.0 ticket list

comment:2 Changed 3 years ago by gk

Keywords: tbb-7.0-must-alpha added; tbb-7.0-must removed

Getting more tickets on our alpha radar.

comment:3 Changed 3 years ago by gk

Priority: MediumHigh

Moving the investigation tickets to higher priority.

comment:4 Changed 3 years ago by gk

Keywords: ff59-esr added; ff52-esr tbb-7.0-must-alpha removed

See #10283 for the synthesis part. Moving this to ff59-esr as this is still off in Firefox ESR52.

comment:5 Changed 23 months ago by gk

Keywords: ff60-esr added; ff59-esr removed

Firefox 60 is the new ESR.

comment:6 Changed 17 months ago by arthuredelstein

In Firefox 60ESR,

  • media.webspeech.synth.enabled is true
  • media.webspeech.recognition.enable is false.

We'll need to investigate whether the synth should be false as well.

comment:7 Changed 17 months ago by arthuredelstein

In https://gitweb.torproject.org/tor-browser.git/tree/browser/app/profile/000-tor-browser.js?h=tor-browser-60.1.0esr-8.0-1, we set media.webspeech.synth.enabled to false (from #10283). So I think we should leave this as is, and how to enable speech synthesis without allowing fingerprinting will require more detailed study.

(I also confirmed that the window.speechSynthesis API is not available to content in our TBB 8.0 alpha)

Last edited 17 months ago by arthuredelstein (previous) (diff)

comment:8 Changed 17 months ago by arthuredelstein

Keywords: tbb-fingerprinting added; ff60-esr removed
Priority: HighMedium

comment:9 Changed 17 months ago by arthuredelstein

Status: newneeds_review

(Setting to review to confirm this is a reasonable decision for now.)

comment:10 Changed 17 months ago by gk

Keywords: TorBrowserTeam201807R added

comment:11 in reply to:  7 Changed 17 months ago by gk

Replying to arthuredelstein:

In https://gitweb.torproject.org/tor-browser.git/tree/browser/app/profile/000-tor-browser.js?h=tor-browser-60.1.0esr-8.0-1, we set media.webspeech.synth.enabled to false (from #10283). So I think we should leave this as is, and how to enable speech synthesis without allowing fingerprinting will require more detailed study.

Which can be done in #22075, I guess.

(I also confirmed that the window.speechSynthesis API is not available to content in our TBB 8.0 alpha)

Great.

Version 0, edited 17 months ago by gk (next)

comment:12 Changed 17 months ago by gk

Keywords: TorBrowserTeam201807 ff68-esr added; TorBrowserTeam201807R removed
Status: needs_reviewassigned

comment:13 Changed 16 months ago by gk

Keywords: TorBrowserTeam201808 added; TorBrowserTeam201807 removed

Move our tickets to August.

comment:14 Changed 15 months ago by gk

Keywords: TorBrowserTeam201809 added; TorBrowserTeam201808 removed

Moving our tickets to September 2018

comment:15 Changed 4 months ago by pili

Sponsor: Sponsor44-can

Adding Sponsor 44 to ESR68 tickets

comment:16 Changed 2 months ago by gk

Keywords: ff76-esr added; ff68-esr TorBrowserTeam201809 removed

We are still good for ESR 68.

comment:17 Changed 2 months ago by gk

Keywords: ff78-esr added; ff76-esr removed

There is no 76 ESR.

Note: See TracTickets for help on using tickets.