Comments (14)
spinning this off to a separate issue so I can track it
from user.js.
I have it in my list, I'm in training the next couple days, so I'm not sure if I'll get to it before next reminder ;)
from user.js.
It looks like the window.open patches in https://bugzilla.mozilla.org/show_bug.cgi?id=1878716 will resolve this also
from user.js.
Yeah... I think we should have a bug on file for this. Canvas is just unusual because there's 4 behaviors to account for across the 2 different modes and then 2 ways of exempting a site that affect the modes differently.
from user.js.
^ ping! @tomrittervg reminder .. next reminder in 3 more days :)
from user.js.
no worries, I'll stop pinging you now :) But this is a blocker for #1804 and unlocking the hundreds of millions of arkenfox users into FPP for testing and reporting 👀
from user.js.
https://bugzilla.mozilla.org/show_bug.cgi?id=1885471
from user.js.
don't forget https://bugzilla.mozilla.org/show_bug.cgi?id=1889762 😃
from user.js.
@tomrittervg did you know (at least FF125+) that if you have RFP enabled and you have ETP Strict enabled - that when you relax RFP canvas extraction, FPP kicks in
here's an example showing RFP is on with RFP values for speech engines, media devices, audio context keys + values, etc .. with said conditions above (canvas exception, ETP blue shield .. it's strict)
I wonder if this would happen in TB next ESR since it's already in PB mode (hence FPP by default) - cc @pospeselr
edit: so RFP overrides FPP where RFP is used. But if FPP adds protections not covered by RFP then there's nothing to stop them from being applied - e.g. when RFP canvas is excepted. This is probably fine, since anything FPP adds can only be a net gain
from user.js.
gah .. still failing: STR
- turn off ETP Strict and use non-PB mode (and disable RFP)
- new session load https://abrahamjuliot.github.io/creepjs/tests/workers.html
- get your real canvas value: for me that is
0e8c9761
(on all four tests) - turn on ETP Strict
- close browser (and I sanitize everything on close)
- test
- close, open
- test
- rinse repeat
It's not applying any FPP on canvas
from user.js.
weird - TZP shows FPP is used .. but that creepy test is showing no changes - it always shows 0e8c9761
which is my real value
edit: even weirder : PB mode is not showing FPP canvas - i,e we are returning the expected values as per TZP test I'm an idiot, accidentally opened file:// instead of https
from user.js.
Yeah... I think we should have a bug on file for this. Canvas is just unusual because there's 4 behaviors to account for across the 2 different modes and then 2 ways of exempting a site that affect the modes differently.
https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42556
from user.js.
AFAICT this issue is not resolved @tomrittervg
from user.js.
indeed ... ^ https://bugzilla.mozilla.org/show_bug.cgi?id=1885471#c6
from user.js.
Related Issues (20)
- ToDo: work out WTF this all means and fixup if required HOT 5
- Privacy-Preserving Attribution (FF 128) HOT 14
- Make Updater.sh shell agnostic HOT 3
- Is it necessary to disable canvas from the browser if it offers to disable or allow them on the site? As well as browser security settings presets HOT 3
- add FPP granularOverrides for the FYI factor HOT 30
- Overrides won't work HOT 6
- ToDo: diffs FF126-FF127 HOT 14
- v128 SOCKS change HOT 2
- RFP: exclude timezone as UTC/GMT and use my real one HOT 2
- How to enable click to copy? HOT 2
- Quarantined domains aren't enforced if a certain add-on is disabled HOT 3
- extensions.enabledScopes HOT 1
- Are `network.dns.disablePrefetch`/`network.dns.disablePrefetchFromHTTPS` master switches of `dom.prefetch_dns_for_anchor_http_document`/`dom.prefetch_dns_for_anchor_https_document`? HOT 2
- ToDo: diffs FF127-FF128 HOT 27
- Question about extensions HOT 1
- Wiki Question: Is the "xxx fingerprint defender" suite of Addons recommended ? HOT 2
- linux: Is it possible to force Firefox use StandardFonts HOT 12
- Firefox HTTP -> HTTPS change in version 129 HOT 1
- confused... HOT 4
- [Question] Implications of disabling `network.dns.native_https_query` HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from user.js.