#30541: webgl readPixels FP entropy -------------------------------------------------+------------------------- Reporter: Thorin | Owner: tbb- | team Type: defect | Status: | needs_review Priority: Very High | Milestone: Component: Applications/Tor Browser | Version: Severity: Normal | Resolution: Keywords: tbb-fingerprinting, | Actual Points: TorBrowserTeam201905R, GeorgKoppen201905 | Parent ID: | Points: Reviewer: | Sponsor: -------------------------------------------------+-------------------------
Comment (by Thorin): Replying to [comment:6 cypherpunks]: > Also your test shows...webgl2: supported.. But `webgl2` shouldn't be allowed. Thanks. If the browser reports that webgl2 is supported, that's one bit of entropy. I'll double check with some tests and kkapsner (it's his code), opened an issue [1]. This is a browser level API check What the browser does in a test after that can provide more entropy: e.g error entropy (e.g blocked at a different step of the process: e.g slider settings, click to play, extension interference, etc), or provide a hash Not sure if meant the API check is flawed, or if TB blocks `WebGL2`. [1] https://github.com/ghacksuserjs/TorZillaPrint/issues/37 -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30541#comment:7> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs