Date: Sat, 20 Apr 2019 12:56:39 +0000 From: bugzilla-noreply@freebsd.org To: gecko@FreeBSD.org Subject: maintainer-feedback requested: [Bug 237414] www/firefox-esr: navigator.userAgent is vulnerable to fingerprinting Message-ID: <bug-237414-21738-XusAJ3HLbe@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-237414-21738@https.bugs.freebsd.org/bugzilla/> References: <bug-237414-21738@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
Bugzilla Automation <bugzilla@FreeBSD.org> has asked freebsd-gecko mailing = list <gecko@FreeBSD.org> for maintainer-feedback: Bug 237414: www/firefox-esr: navigator.userAgent is vulnerable to fingerprinting https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D237414 --- Description --- Having tested there: https://ghacksuserjs.github.io/TorZillaPrint/TorZillaPrint.html ----Output----- [header] http_user_agent=09 [navigator] userAgent Mozilla/5.0 (X11; FreeBSD i386; rv:60.0) Gecko/201001= 01 Firefox/60.0 [navigator] appCodeName Mozilla [navigator] appName Netscape [navigator] product Gecko [navigator] appVersion 5.0 (X11) [navigator] oscpu Windows NT 6.0; Win64; x64 [navigator] platform Win64 [navigator] buildID 20100101 [navigator] productSub 20100101 ---browser, version, os--- [css] browser=09 [error messages] browser Firefox --------- userAgent shows 'X11; FreeBSD i386' while oscpu seems to be faked to 'Windo= ws NT 6.0; Win64; x64' and ist as such not consistent. This is *very* bad as it makes one pretty unique for browser fingerprinting
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-237414-21738-XusAJ3HLbe>