Security/Fusion/Dashboard/Fingerprinting

From MozillaWiki
Jump to: navigation, search

Bug Tracking

Anti-fingerprinting MVP bugs are tracked under the meta bug:
bug 1329996 - [META] Tor Uplift: Fingerprinting Resistance

The MVP is defined as the fingerprinting protection which is needed or would be used by Tor Browser. For general fingerprinting issues but not necessary to fix in Tor, we use the Whiteboard keyword "[fingerprinting]" to specify them.

There are breakages caused by the fingerprinting resistance feature. They are tracked by another meta bug:
bug 1507517 - [META] Breakage from Fingerprinting Resistance

Whiteboard Definition

  • [fingerprinting]: Fingerprinting bugs
  • [fp-triaged]: Already triaged.
    • Priority must be set.
    • P1/P2 must have an assignee.

Fingerprinting Bugs

Open P1 Bugs (We are actively working on them)

No results.

0 Total; 0 Open (0%); 0 Resolved (0%); 0 Verified (0%);


Open P2 Bugs (Important. We will work on them ASAP)

Full Query
ID Summary Priority Status Assigned to Whiteboard
1041818 take steps to mitigate canvas fingerprinting P2 NEW [fingerprinting][tor][fp-triaged]
1397996 scrollbar thickness reveals platform P2 NEW [tor][fingerprinting][fp-triaged][tor 22137]
1414311 New window size is different than expected after changing screen dpi (with privacy.resistFingerprinting pref enabled) P2 NEW [fingerprinting][fp-triaged][tor 30970]
1436226 Hardcode VP8/VP9 algorithm choice when resisting fingerprinting P2 NEW [tor 22548] [fingerprinting][fp-triaged]
1470828 privacy.resistFingerprinting breaks some shortcut keys P2 NEW [fingerprinting][fp-triaged]
1485249 WebGL extensions should be disabled when private.resistFingerprinting is enabled P2 NEW [tor 6370][gfx-noted][fingerprinting][fp-triaged]
1519122 In RFP Mode, spoof the modifier state "Meta" in OSX into a "Ctrl" state in keyboard events. P2 NEW [tor][fingerprinting]
1876636 With privacy.resistFingerprinting track.label & track.getSettings().deviceId differ from enumerateDevices() P2 NEW
1876810 With privacy.resistFingerprinting, "☑ Remember this decision" forgetting which camera and microphone was shared is confusing P2 NEW
1690038 Scrollbar is enabled and disabled based on a setting in macOS system preferences P2 ASSIGNED Tom Ritter [:tjr] (OOTO until 4/30 at least) [fingerprinting][tor 22632][domsecurity-active]

10 Total; 10 Open (100%); 0 Resolved (0%); 0 Verified (0%);


P3-P5 Bugs (Backlog)

Full Query
ID Summary Priority Status Assigned to Whiteboard
1492775 Consider how to do fingerprinting resistance for pointer events for mobile P3 NEW [fingerprinting][fp-triaged]
1315203 XSHM: Cross Site History Manipulation (information leakage) P3 NEW [fingerprinting][fp-triaged]
1330882 When privacy.resistFingerprinting = true, set new windows to rounded dimensions [tor 19459] P3 REOPENED [fingerprinting][tor][fp-triaged]
1401493 Perform Fingerprint Comparison of Tor Browser and Firefox P3 NEW [tor][fingerprinting][fp-triaged]
1834307 Smooth scrolls are disabled if the user prefers-reduced-motion regardless of fingerprint resistance P3 NEW
1409974 KeyboardEvent.location could be used as a user behavior fingerprinting vector. P3 NEW [fingerprinting][fp-triaged]
1422482 OS username disclosure using downloads manager P3 NEW [fingerprinting][tor]
1422862 Make OffscreenCanvas respect Canvas Permission Prompt so you don't always get a placeholder P3 NEW [fingerprinting][gfx-noted][fp-triaged][fpp:m8]
1422890 Add additional Canvas Fingerprinting Tests P3 NEW [fingerprinting][gfx-noted][fp-triaged]
1439784 Fix the KeyboardEvent mochitests P3 NEW [tor][fingerprinting][fp-triaged]
1450401 mozFullScreen leaks exact screen resolution P3 NEW [fingerprinting][fp-triaged]
1472808 For privacy.resistFingerprinting, spoof Keyboard Layout according to content locale P3 NEW [tor][fingerprinting][fp-triaged]
1485258 When privacy.spoof_english is true, don't reveal locale by charset fallback P3 NEW [tor 20025][fingerprinting][fp-triaged]
1490728 Improve discoverability/explanation of RFP P3 NEW [tor][fingerprinting][domsecurity-backlog1][fp-triaged]
1677733 Bookmarks toolbar for new tabs changes screen resolution for new window when privacy.resistFingerprinting is turned on P3 NEW
1507280 Ensure the reporting URI respects Resist Fingerprinting wrt locale P3 NEW [fingerprinting][fp-triaged][domsecurity-backlog]
1507879 Investigate getClientRects for fingerprinting P3 NEW [tor 29564][fingerprinting][fp-triaged]
1542676 Round subpixel accuracy of window properties to integers when resistfingerprinting is enabled P3 NEW [tor 26607][fingerprinting]
1586657 Dialog for spoofing the locale in resist-fingerprinting-mode contains non-localized buttons P3 NEW [tor 31980]
1621988 Some Google Docs Shortcuts still don't work under Resist Fingerprinting P3 NEW [tor][fingerprinting][domsecurity-backlog1]
1666160 Users enable `privacy.resistFingerprinting` and then are surprised when it causes problems P3 REOPENED [domsecurity-backlog1]
1672093 css @media RFP + window/screen leaks P3 REOPENED
1314443 Audit the existing disable WebRTC preferences and ensure they work as advertised P3 ASSIGNED Tom Ritter [:tjr] (OOTO until 4/30 at least) [tor][fingerprinting][tor-mobile][fp-triaged]
1448046 Can we remove the window.Components shim? P3 REOPENED Tom Ritter [:tjr] (OOTO until 4/30 at least)
572650 [meta] Reduce the amount of data and entropy sent out in HTTP requests P5 NEW [fingerprinting][necko-would-take][fp-triaged]
1403747 When privacy.resistFingerprinting is true, warn users not to maximize their window P5 NEW [tor][fingerprinting][fp-triaged]
1781277 Do not base storage estimate on user's disk when RFP is enabled -- NEW
1818894 RFP: harden network information protection -- NEW [fingerprinting]
1823580 Act as though intl.regional_prefs.use_os_locales is false when RFP is enabled -- NEW [domsecurity-backlog]
1832845 Remove the pref `autoDeclineNoUserInputCanvasPrompts` -- NEW
1871789 RFPTarget PointerEvents leaks mozPressure + mozInputSource -- NEW
1746668 replace javascript.use_us_english_locale with RFP for all locales -- ASSIGNED Pier Angelo Vendrame
1787790 getComputedStyle reports a wrong family for system fonts under certain conditions -- NEW Pier Angelo Vendrame [fingerprinting]

33 Total; 33 Open (100%); 0 Resolved (0%); 0 Verified (0%);


Closed Bugs

Full Query
ID Summary Priority Resolution Assigned to Whiteboard
1345322 Create the preference privacy.resistFingerprinting in firefox.js P1 FIXED Ethan Tseng [:ethan] [fingerprinting][tor][fp:m1]
1047098 'Clear Recent History' with 'Cache' or 'Offline Website Data' doesn't clear QuotaManager storage and ServiceWorkers P1 FIXED Andrea Marchesini [:baku] [tor][fingerprinting]
1333933 Disable/spoof fingerprintable features when privacy.resistFingerprinting = true P1 FIXED Arthur Edelstein [:arthur] [tor][fingerprinting][fp-backlog][fp-triaged]
1337161 Disable navigator.getGamepads() when privacy.resistFingerprinting = true P1 FIXED Chung-Sheng Fu [:cfu] [tor][fingerprinting][fp:m2]
1330876 use properly contrasting colors if the desktop theme specifies white on black for text colors [tor 6786] P1 FIXED Chung-Sheng Fu [:cfu] [fingerprinting] gfx-noted [tor][fp:m2]
1369357 Making Firefox not to use site specific zoom level when 'privacy.resistFingerprinting' is true P1 FIXED Chung-Sheng Fu [:cfu] [fingerprinting][tor][fp:m2]
1217290 Add fingerprinting resistance for WebGL (Tor 16005) P1 FIXED Chung-Sheng Fu [:cfu] [tor][tor-standalone][fingerprinting][fp:m3]
1039069 Warn the user that customizing the preferred language list (Accept-Language) can be used for fingerprinting P1 FIXED Chung-Sheng Fu [:cfu] [tor][fingerprinting][fp:m3][ux]
863246 resource:// URIs leak information (Tor 8725) P1 FIXED Chung-Sheng Fu [:cfu] [tor][fingerprinting][fp:m3]
967895 Prompt (w/ Site Permission) before allowing content to extract canvas data (Tor 6253) P1 FIXED Chung-Sheng Fu [:cfu] [tor][fingerprinting][fp:m3][ux]
1360039 Spoof navigator.hardwareConcurrency = 2 when privacy.resistFingerprinting = true P1 FIXED Chris Peterson [:cpeterson] [tor 21675][fingerprinting][fp:m1]
1756280 RFP + navigator.pdfViewerEnabled P1 FIXED David Parks [:handyman]
1330892 <isindex> leaks user locale P1 FIXED [fingerprinting][tor][fp:m3]
1369327 Making reader view users uniform when 'privacy.resistFingerprinting' is true P1 FIXED Jonathan Hao (inactive) [:jhao] [fingerprinting][tor][fp:m2]
1217238 Reduce precision of time exposed by Javascript (Tor 1517) P1 FIXED Jonathan Hao (inactive) [:jhao] [fingerprinting][tor][fp:m1]
1369319 Disable device sensors when 'privacy.resistFingerprinting' is true P1 FIXED Tim Huang[:timhuang] [fingerprinting][tor][fp:m2]
1369309 Neutralize the threat of fingerprinting of media statistics when 'privacy.resistFingerprinting' is true P1 FIXED Tim Huang[:timhuang] [fingerprinting][tor][fp:m2]
1222285 Keyboard layout is leaked by KeyboardEvent P1 FIXED Tim Huang[:timhuang] [tor 15646][tor 17009][tor-standalone][fingerprinting][fp:m3][fp-triaged]
1369303 Spoof/Disable performance API when 'privacy.resistFingerprinting' is true P1 FIXED Tim Huang[:timhuang] [fingerprinting][tor][fp:m2]
1363508 Consider how to do Anti-fingerprinting for Pointer Events P1 FIXED Tim Huang[:timhuang] [tor 25794][fingerprinting]
1372069 Neutralize the threat of fingerprinting of geolocation API when 'privacy.resistFingerprinting' is true P1 FIXED Tim Huang[:timhuang] [fingerprinting][tor][fp:m2]
1333641 Disable WebSpeech API when privacy.resistFingerprinting is enabled P1 FIXED Tim Huang[:timhuang] [tor][fingerprinting][fp:m2]
1333651 Spoofing Navigator API when resisting fingerprinting is enabled P1 FIXED Tim Huang[:timhuang] [tor][fingerprinting][domsecurity-backlog1][fp:m2]
1372072 Neutralize the threat of fingerprinting of network information API when 'privacy.resistFingerprinting' is true P1 FIXED Tim Huang[:timhuang] [fingerprinting][tor][fp:m2]
1409973 Make Date.toLocaleDateString and Intl.DateTimeFormat anti-fingerprintable P1 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [fingerprinting][tor][fp-triaged]
1330890 Use UTC timezone when privacy.resistFingerprinting = true [tor 16622] P1 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [fingerprinting][tor 16622][fp:m1][fp-triaged]
1515001 Debug build crashes with `privacy.spoof_english` set P1 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [tor 28875][fp-triaged]
467035 <!DOCTYPE> ignores contentaccessible, leaks DTD strings and therefore browser UI locale P2 FIXED Alex Catarineu (Tor Browser dev) [sg:low][fingerprinting][fp-triaged][tor 30304][adv-main70-]
1396468 Spoof navigator.oscpu as 'Windows NT 6.1; Win64; x64' when resisting fingerprinting is enabled P2 FIXED Ethan Tseng [:ethan] [tor][fingerprinting][domsecurity-active]
1393283 privacy.resistFingerprinting should change the user agent to 52, not 50 P2 FIXED Ethan Tseng [:ethan] [tor][fingerprinting][domsecurity-active]
1433592 Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites that use those keys with resistFingerprinting enabled P2 FIXED Arthur Edelstein [:arthur] [fingerprinting-breakage][tor 17009]
1382533 When resisting fingerprinting, don't expose local IP Addresses via mDNS P2 FIXED Chung-Sheng Fu [:cfu] [tor 22165][fingerprinting][fp:m3]
1354633 blank MediaError.message when resisting fingerprinting P2 FIXED Chung-Sheng Fu [:cfu] [tor 21792][fingerprinting][fp:m3]
1511434 privacy.resistFingerprinting: Change spoofed OS version to Windows 10 and macOS 10.14 P2 FIXED Chris Peterson [:cpeterson] [tor][fingerprinting][domsecurity-active][fp-triaged]
1511763 privacy.resistFingerprinting: Fix calculation of spoofed ESR version for ESR >= 68.0 P2 FIXED Chris Peterson [:cpeterson] [domsecurity-active][fp-triaged]
1408702 Resist fingerprinting causes scrollbar glitch in Firefox 58 P2 FIXED Emilio Cobos Álvarez (:emilio) [tor][fingerprinting-breakage]
1564422 Change `outputLatency` and `getOutputTimestamp` when `resistFingerPrinting` is enabled P2 FIXED Paul Adenot (:padenot)
1290481 Implement mitigations for opaque response storage in the DOM cache P2 FIXED Tom Tung [:tt, :ttung] [storage-v1][fingerprinting][adv-main57-]
1382545 Animation API exposes high-res time stamp P2 FIXED Tim Huang[:timhuang] [tor 16337][fingerprinting][fp:m3]
680300 Restrict discoverability of protocol handlers [Tor 1623] P2 FIXED Tim Huang[:timhuang] [fingerprinting][probing][necko-backlog][tor]
1384330 Don't expose window.navigator.mozAddonManager data when privacy.resistFingerprinting=true P2 FIXED Tim Huang[:timhuang] [tor 21684][fingerprinting][fp:m3]
1446472 privacy.resistFingerprinting is true blocks QR code (canvas) on web.whatsapp.com without any notice P2 FIXED Tim Huang[:timhuang] [fingerprinting] [gfx-noted][fp-triaged]
1492766 Fingerprinting protection for pointerEvent.pointerid P2 FIXED Tim Huang[:timhuang] [fingerprinting][fp-triaged]
1447592 Don't reset privacy.spoof_english when privacy.resistFingerprinting is flipped back to false P2 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [fingerprinting-breakage]
1461454 Support Resist Fingerprinting in canPlayType and Media Capabilities APIs P2 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [tor 13543][fingerprinting][fp-triaged]
1693861 Collect Telemetry for how many users have enabled RFP P2 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [domsecurity-active]
1621433 In RFP mode, turn the all-white canvas into a fully random 'poison pill' P2 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [fingerprinting][domsecurity-active]
1337157 privacy.resistFingerprinting should disable WEBGL_debug_renderer_info P2 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) gfx-noted, [tor][fingerprinting]
1376865 Do not display Canvas Prompt unless triggered by user input P2 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [tor][fingerprinting][gfx-noted][fp:m4]
1397757 Need "Learn More" page for HTML5 Canvas warning of fingerprinting resistance P2 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [tor][fingerprinting][fp-triaged]
1407366 When privacy.resistFingerprinting=true, dynamically round content dimensions P2 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [fingerprinting][fp-triaged][tor 14429]
1827576 RFP Math sin/cos/tan spoofing missing for asm.js P2 FIXED Tom Schuster (MoCo)
1485266 When privacy.resistFingerprinting = true, use stand-ins for native colors P2 FIXED Gary Chen [:xeonchen] [tor][gfx-noted][fingerprinting][fp-triaged]
1486258 Regression tests to check that new Intl APIs respect privacy.spoof_english P2 FIXED Gary Chen [:xeonchen] [tor 26611][fingerprinting][fp-triaged]
1492587 Ensure the date picker does not leak user locale when "privacy.spoof_english" == 2 P2 FIXED Gary Chen [:xeonchen] [tor 21787][fingerprinting][fp-triaged]
1560574 ftp:// on Windows can be used to leak the system time zone (Tor 30800) P2 FIXED Gary Chen [:xeonchen] [fingerprinting][tor 30800] [necko-triaged]
1581537 Browser UI locale is leaked in several ways P3 FIXED Alex Catarineu (Tor Browser dev) [tor 30683][fingerprinting]
1383495 Spoofing Navigator API platform as Win64 when resisting fingerprinting is enabled P3 FIXED Ethan Tseng [:ethan] [tor][fingerprinting][fp:m3][domsecurity-active]
1121643 Add an option to only expose whitelisted system fonts to avoid fontlist fingerprinting (Tor 13313) P3 FIXED Arthur Edelstein [:arthur] [gfx-noted] [tor][fingerprinting]
267645 Page can obtain path to Mozilla installation or possibly profile by examining JavaScript exceptions P3 FIXED Boris Zbarsky [:bzbarsky] [sg:want] stepping-stone [fingerprinting][fp-triaged][adv-main75-]
1382499 Touch API leaks absolute screen coordinates P3 FIXED Chung-Sheng Fu [:cfu] [tor 10286][fingerprinting][fp:m3]
1372073 Neutralize the threat of fingerprinting of media devices API when 'privacy.resistFingerprinting' is true P3 FIXED Chung-Sheng Fu [:cfu] [fingerprinting][tor][fp:m3]
583181 Don't reveal navigator.buildID to every site on the web P3 FIXED Chris Peterson [:cpeterson] [fingerprinting]
1711179 resistFingerprinting: Bump spoofed Android OS version to 10 P3 FIXED Chris Peterson [:cpeterson] [domsecurity-active]
1680365 RFP userAgent/header on Android doesn't follow Fenix naming convention P3 FIXED Chris Peterson [:cpeterson] [domsecurity-backlog1]
1635011 resistFingerprinting: Bump spoofed OS versions to macOS 10.15 and Android 9 P3 FIXED Chris Peterson [:cpeterson] [domsecurity-active]
1222924 Stop exposing the moz-icon URL scheme to the web P3 FIXED :Gijs (he/him) [gfx-noted][fingerprinting][fp:m4][adv-main59-]
1478158 Guard prefers-reduced-motion by Resist Fingerprinting pref P3 FIXED Hiroyuki Ikezoe (:hiro) [fingerprinting]
1535761 [meta] Remove native theming for content P3 FIXED [fingerprinting][overhead:noted][fp-triaged] [not-a-fission-bug]
1314448 Create a build target that adds --disable-webrtc to the mozconfig P3 FIXED [tor][tor-testing][fingerprinting]
1392844 Ensure that Stylo respects privacy.resistFingerprinting P3 FIXED [tor][fingerprinting][stylo][fp-backlog]
1595823 Fix the AudioContext's sample-rate if privacy.resistFingerprinting is enabled P3 FIXED Paul Adenot (:padenot) [fingerprinting]
1745715 Bundled fonts should have Base visibility even when they are also system-wide installed P3 FIXED Pier Angelo Vendrame
1404608 Do not lie about Operating System when privacy.resistFingerprinting is true P3 FIXED Tim Huang[:timhuang] [domsecurity-backlog3][fingerprinting-breakage]
1509829 privacy.resistFingerprinting: UA header, upstream Tor 26146 P3 FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [tor][fingerprinting][domsecurity-backlog1][fp-triaged]
1561322 UI locale is detectable by button width -- FIXED Alex Catarineu (Tor Browser dev) [tor 24056]
1832598 Smooth scrolls are disabled if the user prefers-reduced-motion regardless of fingerprint resistance -- FIXED Dan Robertson (:dlrobertson)
1459089 Even when resistFingerprinting is enabled, FF leaks the OS locale in the accept headers -- FIXED Igor Oliveira [fingerprinting]
654550 Preference to disable video statistics -- FIXED leonard.beck [tor] [fingerprinting]
1673237 ignore svg.disabled=false in about pages -- FIXED sanketh [tor 27002]
1885258 Remove the IsHidden Exemption for Font Allowlist -- FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least)
1577243 Unconditionally clamp the requestAnimationFrame timestamp (and clamp/jitter it in RFP mode) -- FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least)
1607316 Implement separate fingerprinting resistance treatment of @media interaction features for desktop and android -- FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [fingerprinting][tor 32886]
461204 Boundary delimiter for HTTP file posts is static. That is wrong according to RFC. -- FIXED Tom Ritter [:tjr] (OOTO until 4/30 at least) [sg:low][tor 22919][adv-main74-]
1367313 Add a test case to inform people when someone tries to remove prefs that have fingerprinting concerns P1 INVALID Tim Huang[:timhuang] [fingerprinting][tor][fp:m1] [domsecurity-active]
1369328 Open popup windows in new tabs when 'privacy.resistFingerprinting' = true P1 INVALID Tim Huang[:timhuang] [fingerprinting][tor][fp:m2][domsecurity-active]
1466025 enforce DNT header when privacy.resistFingerprinting=true P3 INVALID [fingerprinting][domsecurity-backlog1][fp-triaged]
1607027 css @media device-pixel-ratio and RFP -- INVALID
1615419 Panopticlick says browser has a unique fingerprint even with privacy.resistFingerprinting = true and Content Blocking: Strict -- INVALID
1628373 Lie better about desktop platform when privacy.resistFingerprinting is set to true -- INVALID
1485268 When privacy.resistFingerprinting = true, Reader mode shouldn't parse on load -- INVALID [tor]
1758520 Disable WebGPU when RFP is enabled -- INVALID
1762390 Should Gecko_MediaFeatures_MatchesPlatform account for ResistFingerprinting? -- INVALID
1781172 report real world system font set when enable privacy.resistFingerprinting -- INVALID
1825378 RFP offscreen canvas allows extension override -- INVALID
1233691 Redesign mediaDevices.enumerateDevices() API -- INVALID
1456378 privacy.resistFingerprinting breaks image cropping in Expensify P2 WONTFIX [domsecurity-backlog1][fingerprinting][fp-triaged]
1393662 Making IsResistFingerprintingEnabled() checks in nsRFPService::ReduceTimePrecisionAs* inline and changing the name of nsRFPService::ReduceTimePrecisionAs* into MaybeReduceTimePrecisionAs* P2 WONTFIX Tom Ritter [:tjr] (OOTO until 4/30 at least) [fingerprinting][tor][domsecurity-backlog][fp:m4]
1529391 Don't spoof version number in User Agent with privacy.resistFingerprinting enabled P3 WONTFIX [fingerprinting][domsecurity-backlog]
1538130 privacy.resistFingerprinting should not create windows with rounded dimensions when letterboxing is enabled P5 WONTFIX Kestrel [fingerprinting][tor]
1450561 Resist screen elements dimensions fingerprinting P5 WONTFIX [tor][fingerprinting][domsecurity-backlog1][fp-triaged]
1397994 CSS line-height reveals platform P5 WONTFIX Pier Angelo Vendrame [tor 23104][tor 23701][tor 29563][fingerprinting][fp-triaged]
1308340 checkbox in about:preferences#privacy for privacy.resistFingerprinting (Tor 20244.1) -- WONTFIX Arthur Edelstein [:arthur] [tor][fingerprinting][fp-backlog][fp-triaged]
1320465 Favicon is added to bookmark in Private Browsing mode -- WONTFIX
1409809 Constantly remind people about privacy.resistFingerprinting -- WONTFIX [fingerprinting-breakage]
1670199 RFP + font visibility = 1: entropy improvements -- WONTFIX
1708593 Enhance resist fingerprinting: Disable web audio (API) by default when privacy.resistFingerprinting is enabled -- WONTFIX
1601040 Add UI for modifying resistFingerprinting prefs when privacy.resistFingerprinting is enabled -- WONTFIX richard (Tor Project) [tor 32325][fingerprinting]
1369330 Make javascript use English locale when 'privacy.resistFingerprinting' is true P1 DUPLICATE [fingerprinting][tor][fp:m2]
1405810 Setting privacy.resistFingerprinting=true breaks cmd keyboard shortcuts for Google Docs on OSX P1 DUPLICATE [domsecurity-backlog1][tor][fingerprinting-breakage][fp-triaged]
527667 DOM Storage (localStorage, sessionStorage) data is not cleared when "Clear Recent History" is used with Time range not "Everything" P1 DUPLICATE [sg:want][tor][fingerprinting]
1468957 privacy.resistFingerprinting set to true breaks https://www.google.com/streetview/ P2 DUPLICATE Tim Huang[:timhuang] [domsecurity-backlog1][fingerprinting][fp-triaged]
1460145 privacy.resistfingerprinting breaks the square selection on the HOT Tasking Manager P2 DUPLICATE Tim Huang[:timhuang] [domsecurity-backlog1][fingerprinting][fp-triaged]
1485280 Prevent fingerprinting by SpeechRecognition P3 DUPLICATE [tor][fingerprinting][fp-triaged]
1640449 Privacy and security features should prevent localhost and local network WebSocket abuse P3 DUPLICATE [fingerprinting][necko-triaged]
1462115 privacy.resistfingerprinting affects the timezone displayed in native file picker dialogs P3 DUPLICATE [tor][fingerprinting][domsecurity-backlog1][fp-triaged]
1442863 Smooth scrolling implementations perform badly with resistFingerprinting's reduced timer precision P3 DUPLICATE [fingerprinting][fp-triaged]
1364261 Make UTC Timezone Spoofing optional when privacy.resistfingerprinting = true P3 DUPLICATE [tor][fingerprinting-breakage][fp-backlog][fp-triaged]
1400582 Deleting all history still leaves some traces that can be used to precisely track individual users. P3 DUPLICATE [tor][fingerprinting]
732096 Add a preference to prevent local font enumeration P3 DUPLICATE [fingerprinting][tor][tor-standalone]
1425130 Sensor API exposes a High-Res timestamp P3 DUPLICATE [fingerprinting][domsecurity-backlog1][fp-triaged]
1433815 Ensure EnableOrientationChangeListener respects privacy.resistFingerprinting P3 DUPLICATE [tor-mobile][fingerprinting][fp-triaged]
1403099 game in http://www.best.io/paper-io has very bad performance due to anti-fingerprinting setting (needs higher resolution timer) P5 DUPLICATE [domsecurity-backlog][fingerprinting][fp-triaged]
1394735 Enabling privacy.resistFingerprinting causes jank in jquery scrolling -- DUPLICATE [fingerprinting][fp-triaged]
1077986 offline storage permission setting not working correctly -- DUPLICATE [tor][fingerprinting]
1398303 Local Storage not cleared by Clear Recent History -- DUPLICATE [tor][fingerprinting]
903959 custom resource://foo/ allows fingerprinting addons -- DUPLICATE [fingerprinting]
811582 window JS object provides a large amount of identifiable information -- DUPLICATE [fingerprinting][fp-triaged]
1420234 The privacy.resistFingerprinting flag interferes with the JS Date object -- DUPLICATE [fingerprinting]
1615483 hide VR devices when privacy.resistFingerprinting = true -- DUPLICATE [fingerprinting]
1625771 privacy.resistFingerprinting: Fix calculation of spoofed ESR version (affecting releases >=76) -- DUPLICATE
1437349 Detect if user install certain software with external protocol -- DUPLICATE [fingerprinting]
1518839 In RFP: Only Spoof the OS in the User Agent; and do not lie in the HTTP Header -- DUPLICATE Tom Ritter [:tjr] (OOTO until 4/30 at least) [tor 26146][fingerprinting]
1437266 Navigating back on youtube sometimes fails and restarts the current video with resistFingerprinting enabled P3 WORKSFORME [fingerprinting][domsecurity-backlog1][fp-triaged]
779197 Use a protocol not accessible from content P3 WORKSFORME [fingerprinting]
1418537 Bad window height set when bookmarks toolbar is open with resistfingerprinting option P3 WORKSFORME [fingerprinting][fp-triaged][tor 27845]
1216800 some chrome code may be incorrectly receiving spoofed devicePixelRatio -- WORKSFORME [fingerprinting]
1405842 Devices returned from enumerateDevices have the same deviceId across originattributes -- WORKSFORME [usercontextId][tor]
1539503 Ensure CSS device-pixel-ratio (and related) and imgset/srcset obeys Fingerprinting Resistance -- WORKSFORME [fingerprinting][tor]
1432506 Implement the Canvas Permission Prompt on Fennec P3 INCOMPLETE [fingerprinting][fp-triaged]
1399279 initial viewport too small for fullscreen WebApps with privacy.resistFingerprinting enabled P5 INCOMPLETE [fingerprinting][fp-triaged][tor-mobile]

141 Total; 141 Open (100%); 0 Resolved (0%); 0 Verified (0%);

Retrieved from "https://wiki.mozilla.org/index.php?title=Security/Fusion/Dashboard/Fingerprinting&oldid=1204006"