#25902 closed defect (wontfix)

Disable Firefox Mobile accessibility services

Reported by: igt0 Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-mobile
Cc: sysrqb, gk, mcs, pospeselr, arthuredelstein, dmr Actual Points:
Parent ID: #25703 Points:
Reviewer: Sponsor:

Description

Firefox Android Accessibility services (GeckoAccessibility) can be used by an external app to track user interaction in a web page.

Child Tickets

Change History (6)

comment:1 Changed 18 months ago by igt0

Parent ID: #25703

comment:2 Changed 18 months ago by igt0

Component: - Select a componentApplications/Tor Browser
Owner: set to tbb-team

comment:4 Changed 18 months ago by igt0

Cc: sysrqb gk mcs pospeselr arthuredelstein added

FF mobile has an additional "protection" against eavesdrop of accessibility events. It dispatches the events just if exploration by touch is enabled.

                    mEnabled = accessibilityManager.isEnabled() &&
                               accessibilityManager.isTouchExplorationEnabled();

It means that the user must enabled it, manually. And when it is enabled, it changes the UI behavior, the user must double click to select form fields. Single clicks, normally, makes the system to read the element.

I tested it using https://github.com/alper061/ScreenSpeak and TalkBack.

comment:5 Changed 17 months ago by dmr

Cc: dmr added
Keywords: tbb-mobile added

comment:6 Changed 16 months ago by igt0

Resolution: wontfix
Status: newclosed

We don't need to fix this, FF already has enough protections see: https://trac.torproject.org/projects/tor/ticket/25902#comment:4

Note: See TracTickets for help on using tickets.