Security/Fusion/Dashboard

From MozillaWiki
< Security‎ | Fusion
Revision as of 11:04, 26 July 2018 by Ethantseng (talk | contribs) (Only query fingerprinting bugs for now)
Jump to navigation Jump to search

Bug Tracking

Fingerprinting MVP bugs are tracked under the meta bug:
bug 1329996 - [META] Support anti-fingerprinting protection

Whiteboard Definition

  • [fingerprinting]: Fingerprinting bugs
  • [fp-breakage]: Breakage issues caused by fingerprinting resistance
  • [fp-triaged]: Already triaged
  • [fp-backlog]: Backlog bugs

Fingerprinting Bugs

Open P1 Bugs (We are actively working on them)

No results.

0 Total; 0 Open (0%); 0 Resolved (0%); 0 Verified (0%);


Open P2 Bugs (Important. We will work on them ASAP)

Full Query
ID Summary Priority Status Assigned to Whiteboard
1041818 take steps to mitigate canvas fingerprinting P2 NEW [fingerprinting][tor][fp-triaged]
1329996 [META] Tor Uplift: Fingerprinting Resistance P2 NEW [tor][fingerprinting][domsecurity-meta][fp-triaged]
1397996 scrollbar thickness reveals platform P2 NEW [tor][fingerprinting][fp-triaged][tor 22137]
1485249 WebGL extensions should be disabled when private.resistFingerprinting is enabled P2 NEW [tor 6370][gfx-noted][fingerprinting][fp-triaged]
1522517 [meta] Unify software rendering settings while privacy.resistFingerprinting=True P2 NEW [fingerprinting][fp-triaged]
1522528 Disable antialiasing while privacy.resistFingerprinting=True P2 NEW [fingerprinting][fp-triaged]

6 Total; 6 Open (100%); 0 Resolved (0%); 0 Verified (0%);


P3-P5 Bugs (Backlog)

Full Query
ID Summary Priority Status Assigned to Whiteboard
1445310 Clamp and Jitter Timestamps in CSS Animations P3 NEW Brian Birtles (:birtles) [fingerprinting][fp-triaged]
1152448 "Forget About This Site" does not forget site's enumerateDevices Ids P3 ASSIGNED Jan-Ivar Bruaroey [:jib] (needinfo? me) [fingerprinting][fp-triaged]
1439784 Fix the KeyboardEvent mochitests P3 NEW [tor][fingerprinting][fp-triaged]
1447011 Permit setting HSTS entries only on the host name or the eTLD+1 P3 NEW [fingerprinting][psm-backlog][fp-triaged]
1356383 Add Telemetry for Gamepad API P3 REOPENED [fingerprinting][fp-triaged]
1330882 When privacy.resistFingerprinting = true, set new windows to rounded dimensions [tor 19459] P3 REOPENED [fingerprinting][tor][fp-triaged]
1233846 WebSpeech Synthesis API mustn't allow fingerprinting P3 NEW [fingerprinting][tor 10283][fp-triaged]
1315203 XSHM: Cross Site History Manipulation (information leakage) P3 NEW [fingerprinting][fp-triaged]
1325874 Consider seperating page content history for userContextId P3 NEW [fingerprinting][fp-triaged][domsecurity-backlog2][userContextId]
1336208 Bundle and whitelist fonts when privacy.resistFingerprinting = true P3 NEW [fingerprinting][gfx-noted][fp-triaged]
1356381 [META] Add Telemetry and Perform Experiments to measure breakage/impact of Anti-Fingerprinting Patches P3 NEW [domsecurity-meta] [fingerprinting][fp-triaged]
1940296 Vsync is enabled on Wayland when RFP is on and leaks the monitor refresh rate P3 NEW [fingerprinting]
1372288 [meta] WebExtensions can be used as user fingerprint P3 NEW [fingerprinting][fp-triaged]
1383656 Tweak and analyze the value and find out an appropriate way to generate the padding size for opaque response P3 NEW [fingerprinting] [fxprivacy] [fp-triaged]
1394448 Cannot install Addon with privacy.resistFingerprinting==true P3 NEW [fp-triaged][domsecurity-backlog1][fingerprinting]
1401493 Perform Fingerprint Comparison of Tor Browser and Firefox P3 NEW [tor][fingerprinting][fp-triaged]
1772039 Enabling privacy.resistFingerprinting causes the zoom cameras/screens to be a black screen. P3 NEW [fingerprinting][domsecurity-backlog3]
1405971 Webextension UUID leak to servers via Fetch request headers P3 NEW [fingerprinting][fp-triaged]
1409974 KeyboardEvent.location could be used as a user behavior fingerprinting vector. P3 NEW [fingerprinting][fp-triaged]
1412814 privacy.resistFingerprinting should do something smarter about system metric media queries. P3 NEW [gfx-noted][fingerprinting][fp-triaged]
1722181 Math Fingerprinting via Polyfills P3 NEW [fingerprinting]
1414311 New window size is different than expected after changing screen dpi (with privacy.resistFingerprinting pref enabled) P3 NEW [fingerprinting][fp-triaged][tor 30970]
1420653 DeviceId is persisted even if cookies are disabled, allowing persistent fingerprint P3 NEW [fingerprinting][fp-triaged]
1420809 Permissions that are perpetually denied should not return Reject immediately P3 NEW [fingerprinting][fp-triaged]
1422482 OS username disclosure using downloads manager P3 NEW [fingerprinting][tor]
1422890 Add additional Canvas Fingerprinting Tests P3 NEW [fingerprinting][gfx-noted][fp-triaged]
1717671 Avoid the use of a persistent UUID in the public base URL of extensions P3 NEW [mv3-future][sp3][fingerprinting]
1636005 Default submit button label length allows browser language fingerprinting P3 NEW [reporter-external] [client-bounty-form] [verif?][fingerprinting][domsecurity-backlog1]
1429097 Pause execution when Canvas Permission Prompt is displayed P3 NEW [fingerprinting][gfx-noted][fp-triaged]
1429519 Add a canvas-imagedata permission P3 NEW [fingerprinting][gfx-noted][fp-triaged]
1429648 Add tests that handle timer rounding P3 NEW [fingerprinting][fp-triaged]
1429865 Allow managing canvas permissions in about:preferences when resistFingerprinting is on P3 NEW [gfx-noted][fingerprinting][fp-triaged]
1617872 Consider making IsResistFingerprintingEnabled affect shared memory P3 NEW [fingerprinting][domsecurity-backlog1]
1581453 Resist Fingerprinting retriggers Bug 402089 - nsDOMUIEvent should cache coordinates when DuplicatePrivateData is called P3 NEW [fingerprinting]
1502831 Use software rendering to mitigate canvas fingerprinting while privacy.resistFingerprinting=True P3 REOPENED [fingerprinting][fp-triaged]
1450398 [meta] Resist Fingerprinting Mode should allow finer control of applicability P3 NEW [fingerprinting][fp-triaged][fpp:m?]
1450401 mozFullScreen leaks exact screen resolution P3 NEW [fingerprinting][fp-triaged]
1466148 WebRTC leaks internal addresses even when camera/mic permissions are not granted P3 NEW [fingerprinting][fp-triaged]
1470592 macOS 10.14 Camera/Mic Permissions granted in Private Browsing Mode shouldn't persist P3 NEW [tor][fingerprinting][fp-triaged]
1472808 For privacy.resistFingerprinting, spoof Keyboard Layout according to content locale P3 NEW [tor][fingerprinting][fp-triaged]
1475973 browser/components/resistfingerprinting/test/browser/browser_roundedWindow_open_* and browser/components/resistfingerprinting/test/browser/browser_roundedWindow_windowSetting_* fail on Windows install with 150% dpi P3 NEW [tor][fingerprinting][fp-triaged]
1485258 When privacy.spoof_english is true, don't reveal locale by charset fallback P3 NEW [tor 20025][fingerprinting][fp-triaged]
1490728 Improve discoverability/explanation of RFP P3 NEW [tor][fingerprinting][domsecurity-backlog1][fp-triaged]
1507517 [META] Breakage from Fingerprinting Resistance P3 NEW [fingerprinting][fp-triaged][domsecurity-backlog1]
1507879 Investigate getClientRects for fingerprinting P3 NEW [tor 29564][fingerprinting][fp-triaged]
1532859 Non-integer devicePixelRatio's cause blurriness with RFPTarget::WindowDevicePixelRatio P3 NEW [domsecurity-backlog1][tor][fingerprinting][fp-triaged][fpp:m?]
1538718 Account for Display Scaling when rendering P3 NEW [fingerprinting]
1542676 Round subpixel accuracy of window properties to integers when resistfingerprinting is enabled P3 NEW [tor 26607][fingerprinting]
1562290 Need a mechanism to limit gyroscope data leakage for fingerprinting P3 NEW [fingerprinting]
1591337 RFP screen spoofs: step common spoofs based on inner window P3 ASSIGNED Pier Angelo Vendrame [fingerprinting]
1579584 Have window.outerHeight/outerWidth lie and report the innerHeight/innerWidth P3 NEW Tom Ritter [:tjr] [fingerprinting][fpp:future]
1314443 Audit the existing disable WebRTC preferences and ensure they work as advertised P3 ASSIGNED Tom Ritter [:tjr] [tor][fingerprinting][tor-mobile][fp-triaged]
1428033 Apply Resist Fingerprinting Protection to WebGL P5 NEW [fingerprinting][gfx-noted][fp-triaged]
1426232 Consider a Timezone Permission for Resist Fingerprinting P5 NEW [fingerprinting][fp-triaged]
1414162 Investigate and improve privacy.resistFingerprinting handling when toggled on mid-session P5 NEW [fingerprinting][fp-triaged]
1403747 When privacy.resistFingerprinting is true, warn users not to maximize their window P5 NEW [tor][fingerprinting][fp-triaged]
1928095 x86/x86_64 architecture are exposed through sign bit on NaN arithmetic P5 NEW [fingerprinting]
1362184 Add Telemetry for IndexedDB P5 NEW [fingerprinting][fp-triaged]
572650 [meta] Reduce the amount of data and entropy sent out in HTTP requests P5 NEW [fingerprinting][necko-would-take][fp-triaged]
1449732 Do not expose Local IP Address in Resist Fingerprinting Mode P5 REOPENED [fingerprinting][fp-triaged]
1582687 Block user-installed fonts by default -- NEW [fingerprinting]
1719738 Simplify Timezone Names to Reduce Fingerprinting -- NEW [fingerprinting]
1916271 Gecko reveals sanitized GPU Characteristics; webkit and blink return hardcoded strings for all users -- NEW [client-bounty-form][fingerprinting]
959893 [meta] WebRTC Internal IP Address Leakage -- NEW [fingerprinting][fp-triaged]
503221 Locale can be determined using jar: protocol to test resource:///chrome/ entries -- NEW [fingerprinting]

65 Total; 65 Open (100%); 0 Resolved (0%); 0 Verified (0%);

Retrieved from "https://wiki.mozilla.org/index.php?title=Security/Fusion/Dashboard&oldid=1198002"