News for hackers. Stuff that matters.
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by tedunangst on Wednesday March 06, 2019 @06:40PM (#19324135)
Are you also going to download every resource listed in every @media section of the CSS regardless of screen size?
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by blotter_paper on Wednesday March 06, 2019 @08:47PM (#19324898)
That part doesn't seem too unreasonable to me, but you could also just go with the largest available size and then scale it as necessary on the client.
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by missblit on Wednesday March 06, 2019 @09:28PM (#19325098)
Scaling down the largest size isn't always appropriate (though would probably work in most cases).

One example might be a set of images where the smaller images wrap text more agressively to work better on a screen that's not as wide.

Re:Firefox to add Tor Browser anti-fingerprinting technique ... by blotter_paper on Wednesday March 06, 2019 @09:40PM (#19325159)
Good point, I've seen comparable use cases in the wild but it slipped my mind!
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by oftenwrong on Wednesday March 06, 2019 @08:22PM (#19324787)
The browser could pick a fake screen size, and behave in a way that is consistent with that fake screen size. This would probably break many sites, but it would mitigate fingerprinting if a common size was used.
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by pmoriarty on Wednesday March 06, 2019 @09:10PM (#19324999)
This solution is just begging for side-channel attacks.

Firefox had better make sure its timing is not affected by such shenanigans, for instance.

Re:Firefox to add Tor Browser anti-fingerprinting technique ... by oftenwrong on Thursday March 07, 2019 @05:39AM (#19327016)
I doubt that is avoidable, as the browser would still probably need to render at the false viewport dimensions. For a common adversary, fingerprinting based on timing would be more involved and less useful.