Open Bug 1329996 (uplift_tor_fingerprinting) Opened 8 years ago Updated 1 year ago

[META] Tor Uplift: Fingerprinting Resistance

Categories

(Core :: DOM: Security, defect, P2)

Product:
Core
Component:
DOM: Security
Type:
defect

Tracking

()

Milestone:
mozilla54

People

(Reporter: ethan, Unassigned, Mentored)

References

(Depends on 49 open bugs, Blocks 2 open bugs)

Details

(Keywords: meta, Whiteboard: [tor][fingerprinting][domsecurity-meta][fp-triaged])

As part of the Tor uplift project, we are going to implement anti-fingerprinting protection [1] in Firefox. This bug is used as the meta bug of all anti-fingerprinting features. Reference: [1] Cross-Origin Fingerprinting Unlinkability https://www.torproject.org/projects/torbrowser/design/#fingerprinting-linkability
Alias: AntiFingerprinting
Assignee: nobody → ettseng
Blocks: meta_tor
Priority: -- → P2
Whiteboard: [tor][fingerprinting][domsecurity-meta]
Target Milestone: --- → mozilla54
Depends on: 1233691
Depends on: 1330892
Depends on: 1222285
Depends on: 1217290
Depends on: 1330890
Depends on: 1330882
Depends on: 1330876
No longer depends on: 959893
Depends on: 1333651
Fingerprinting defenses work best when they are used together. Therefore an idea we have proposed is to make all anti-fingerprinting features active when the pref "privacy.resistFingerprinting" = true. That will make it easier for users to activate all anti-fingerprinting features at once, and also will give a simple definition of what is included in Firefox's fingerprinting resistance so that we can measure our progress using tools such as https://panopticlick.eff.org/. Also, Tor Browser will enable this pref.
Depends on: 1333933
Depends on: 863246
Depends on: 1337161
Depends on: 1336208
Depends on: 1345322
Depends on: 1360039
Depends on: 654550
Depends on: 1363508
Depends on: 1290481
Depends on: 1121643
Depends on: 1364261
Depends on: 1366202
No longer depends on: 1366202
Depends on: 1367313
Depends on: 1369299
Depends on: 1369303
Depends on: 1369309
Depends on: 1369319
Depends on: 1369327
Depends on: 1369328
Depends on: 1369330
Depends on: 1369357
Depends on: 1372069
Depends on: 1372072
Depends on: 1372073
Depends on: 1376865
Depends on: 1382499
Depends on: 1382533
Depends on: 1382545
Depends on: 1384330
Depends on: 1354633
Depends on: 1383495
Depends on: 1222924
Depends on: 1392844
Depends on: 1393283
Depends on: 1337157
Depends on: 1393662
Depends on: 1372288
Depends on: 1396468
Depends on: 1397994
Depends on: 1397996
Depends on: 1397757
Depends on: 1398414
Depends on: 1394448
Bug 1077986 could also be added
Depends on: 1401493
Depends on: 1403747
Depends on: 1403099
Depends on: 1404017
Depends on: 1404608
Depends on: 1405810
Depends on: 1405842
Depends on: 1409809
Depends on: 1408702
Depends on: 1409973
Depends on: 1409974
Depends on: linux-nnt
Depends on: 1414162
Depends on: 1420234
Depends on: 1418537
Whiteboard: [tor][fingerprinting][domsecurity-meta] → [tor][fingerprinting][domsecurity-meta][fp-triaged]
No longer depends on: 1398414
Assignee: ethantseng → nobody
Depends on: 1433350
Depends on: 1433815
Depends on: 1437349
Depends on: 1439784
Depends on: 1433592
Depends on: 467035
Depends on: 1449732
Depends on: 1450401
Depends on: 1450561
No longer depends on: 1453504
Depends on: 1461454
Depends on: 1462115
Depends on: 1459089
Recent research suggests the work on anti-fingerprinting being done here matters a lot : https://freedom-to-tinker.com/2018/06/29/against-privacy-defeatism-why-browsers-can-still-stop-fingerprinting/ Thanks for the work already done here by the Firefox and Tor teams and looking forward to new improvements as well :-)
Depends on: 1472808
Depends on: 1485249
Depends on: 1485258
Depends on: 1485264
Depends on: 1485266
Depends on: 1485268
Depends on: 1358149
Depends on: 1485280
Depends on: 1486258
Depends on: 1490728
Depends on: 1492587
Depends on: 1492766
Depends on: 1492775
Depends on: 1501875
No longer depends on: 1501875
Depends on: 1507280
Depends on: 267645
Depends on: 1381628
Depends on: 1381938
Depends on: 1414311
Depends on: 1470828
Whiteboard: [tor][fingerprinting][domsecurity-meta][fp-triaged] → [tor][fingerprinting][domsecurity-meta]
From now on, this meta bug is used to track anti-fingerprinting bugs which will be used by Tor Browser. The purpose is to help us narrow down the scope of the Tor Uplift project, and track its progress more easily. If a bug is a fingerprinting issue in general, but not necessary to fix for Tor, we'll simply mark it as [fingerprinting] in Whiteboard and not block this meta bug.
Alias: AntiFingerprinting → uplift_tor_fingerprinting
Summary: [META] Support anti-fingerprinting protection → [META] Tor Uplift: Fingerprinting Resistance
No longer depends on: 1485264
No longer depends on: finegrained-rfp
No longer depends on: 1449732
Depends on: 1446472
Depends on: 1442863
Depends on: 1437266
Depends on: 1436226
Depends on: 1432506
No longer depends on: 1433350
Depends on: 1428331
Depends on: 1425130
Depends on: 1422890
Depends on: 1422862
No longer depends on: 1414162
No longer depends on: 1404017
Depends on: 1399279
Depends on: 1394735
No longer depends on: 1394448
Depends on: 1390465
No longer depends on: 1381628
No longer depends on: 1372288
No longer depends on: 1369299
No longer depends on: 1358149
No longer depends on: 1336208
Assignee: nobody → ettseng
Whiteboard: [tor][fingerprinting][domsecurity-meta] → [tor][fingerprinting][domsecurity-meta][fp-triaged]
No longer depends on: 1325874
No longer depends on: 1233846
No longer depends on: 724182
No longer depends on: 724179
No longer depends on: 167475
Depends on: 1507879
Depends on: 1509829
Depends on: 1511434
Depends on: 1511763
Depends on: 1515001
Depends on: 1518839
Depends on: 1519122
Depends on: 1529391
No longer depends on: linux-nnt
No longer depends on: 1381938
No longer depends on: 1536533
Depends on: 1538130
Depends on: 1539503
Depends on: 1542676
Depends on: 1216800
Depends on: 1560574
Depends on: 1562290
No longer depends on: 1562290
Depends on: 1564422
Depends on: 1448046
Depends on: 1575690
Depends on: 1577243
Depends on: 1581537
Depends on: 1586657
Depends on: 1422482
Depends on: 1595823
Depends on: 1478158
Depends on: 1601040
Depends on: 461204
Depends on: 1603332
Depends on: 1607316
Depends on: 1615419
Depends on: 1615483
Depends on: 1621433
Depends on: 1621988
Depends on: 1625771
Depends on: 1628373
Depends on: 1635011
Depends on: 1640449

Mozilla should follow Apple's attitude and disable some Web APIs by default: https://www.zdnet.com/article/apple-declined-to-implement-16-web-apis-in-safari-due-to-privacy-concerns/

The more features have to be disabled by Fingerprinting Resistance, it becomes less effective and users have a risk of standing out.

Thanks for listening.

Depends on: 1670199
Depends on: 1671850
Depends on: 1607027
Depends on: 1672093
Depends on: 1673237
Depends on: 1677733
Depends on: 1680365
Depends on: 1690038
Depends on: 1693861
Depends on: 1708593
Depends on: 1711179
Depends on: 1745715
Depends on: 1746668
Depends on: 1709330
Depends on: 1756280
Depends on: 1758520
Depends on: 1762390
Depends on: 1772711
Assignee: ettseng → nobody
Depends on: 1781277
Depends on: 1781172
Depends on: 1787790
Severity: normal → S3
Depends on: 1823580
Depends on: 1825378
Depends on: 1827576
Depends on: 1832598
Depends on: 1832845
Depends on: 1834307
Depends on: 1818894
You need to log in before you can comment on or make changes to this bug.