Opened 7 weeks ago

#33849 assigned defect

Maybe disable Windows Hello

Reported by: pospeselr Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: #33534 Points:
Reviewer: Sponsor: Sponsor58

Description

If we want to disable Windows Hello and associated biometrics queries in Tor Browser it looks like we can patch various IsUserVerifyingPlatformAuthenticatorAvailable calls to always return false.

It seems like there was a bit of a refactor to wrap both Windows Hello as well hardware tokens like yubikeys(?) into the same authentication system so we need to take care to not break support for these.

See this patch: https://bugzilla.mozilla.org/show_bug.cgi?id=1508115
The library Mozilla is using to add Windows Hello support: https://github.com/Microsoft/webauthn

Child Tickets

Change History (0)

Note: See TracTickets for help on using tickets.