Opened 7 weeks ago

#32192 new task

Provide input or mitigate W3C Proposal for css-mediaqueries

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Major Keywords: tbb-fingerprinting
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

TBB Team may want to be proactive on an upcoming W3C Proposal for css-mediaqueries as it is already at Level 5 consideration.

Changes include:

"If implemented naively without taking privacy into account, such a feature combined with prefers-color-scheme could potentially reveal the user's longitude to all websites with a remarkable degree of precision. (Multiple readings over the course of a year might also be able to determine latitude to some extent.)"

Overall this seems like a very bad spec as currently written, and could just as easily be done with current JS rather than forcing time-based tracking into headers and CSS code in all major useragents.

Child Tickets

Change History (0)

Note: See TracTickets for help on using tickets.