News for hackers. Stuff that matters.

A comment on Firefox to add Tor Browser anti-fingerprinting technique called letterboxing. Parent comment

Re:Firefox to add Tor Browser anti-fingerprinting technique ... by daveFNbuck on Thursday March 07, 2019 @02:13AM (#19326138)
People with that preference usually just turn off javascript.
[ Parent | on HN ]
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by oftenwrong on Thursday March 07, 2019 @05:44AM (#19327046)
...and they would still be susceptible to CSS-based fingerprinting.
[ Parent | on HN ]
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by cortic on Thursday March 07, 2019 @08:19AM (#19327760)
How? Admittedly my knowledge of CSS is dated, but without scripting enabled you can't set cookies, make auto server request, or even auto set an external CSS file (that could be served and counted)..

Its not something I've considered before and i am genuinely curious how this would work.

[ Parent | on HN ]
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by detaro on Thursday March 07, 2019 @08:23AM (#19327786)
You can make server requests by loading images and fonts. Browsers only load those resources they actually need, so there's lots of opportunities for conditionally triggering requests. Media queries for window size, fallback fonts to check installed fonts, css feature checks to make guesses at the browser type, ...
[ Parent | on HN ]
Re:Firefox to add Tor Browser anti-fingerprinting technique ... by enriquto on Thursday March 07, 2019 @11:03AM (#19329122)
oh my god, what a world we live in!
[ Parent | on HN ]