Opened 2 years ago

Closed 2 years ago

#21786 closed task (fixed)

Check whether devicelight events are properly rounded off on mobile for Tor Browser based in ESR52

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: ff52-esr, tbb-mobile, tbb-fingerprinting
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Mozilla rounded recently the devicelight event.value values off in an effort to reduce fingerprinting: https://bugzilla.mozilla.org/show_bug.cgi?id=1299454. We should check whether that's good enough for us.

Child Tickets

Change History (2)

comment:1 Changed 2 years ago by gk

We might want to do something more drastic as information leaks got detected with the Ambient Light Sensors API: https://blog.lukaszolejnik.com/stealing-sensitive-browser-data-with-the-w3c-ambient-light-sensor-api/ and https://bugzilla.mozilla.org/show_bug.cgi?id=1357733.

comment:2 Changed 2 years ago by gk

Resolution: fixed
Status: newclosed

Setting device.sensors.enabled to false should be enough which we already did in #15758. Thus, we are good here.

Note: See TracTickets for help on using tickets.