Disable Firefox Mobile accessibility services

Firefox Android Accessibility services (GeckoAccessibility) can be used by an external app to track user interaction in a web page.

added component::applications/tor browser owner::tbb-team parent::25703 priority::medium resolution::wontfix severity::normal status::closed tbb-mobile type::defect labels

Trac:
Parent: N/A to #25703 (moved)

Trac:
Owner: N/A to tbb-team
Component: - Select a component to Applications/Tor Browser

Relevant papers:

1. https://web.eecs.umich.edu/~alfchen/alfred_sec14.pdf
2. http://www.s3.eurecom.fr/~yanick/publications/2017_oakland_cloakanddagger.pdf

FF mobile has an additional "protection" against eavesdrop of accessibility events. It dispatches the events just if exploration by touch is enabled.

                    mEnabled = accessibilityManager.isEnabled() &&
                               accessibilityManager.isTouchExplorationEnabled();

It means that the user must enabled it, manually. And when it is enabled, it changes the UI behavior, the user must double click to select form fields. Single clicks, normally, makes the system to read the element.

I tested it using https://github.com/alper061/ScreenSpeak and TalkBack.

Trac:
Cc: N/A to sysrqb, gk, mcs, pospeselr, arthuredelstein

Trac:
Keywords: N/A deleted, tbb-mobile added
Cc: sysrqb, gk, mcs, pospeselr, arthuredelstein to sysrqb, gk, mcs, pospeselr, arthuredelstein, dmr

We don't need to fix this, FF already has enough protections see: [https://trac.torproject.org/projects/tor/ticket/25902#comment:4]

Trac:
Resolution: N/A to wontfix
Status: new to closed

closed

moved to tpo/applications/tor-browser#25902 (closed)