Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent SpeechSynthesis interface readout for increased privacy #20654

Open
pilsnerbeer opened this issue Jan 24, 2022 · 0 comments
Open

Prevent SpeechSynthesis interface readout for increased privacy #20654

pilsnerbeer opened this issue Jan 24, 2022 · 0 comments
Labels
OS/Desktop priority/P5 Not scheduled. Don't anticipate work on this any time soon. privacy

Comments

@pilsnerbeer
Copy link

pilsnerbeer commented Jan 24, 2022

Description

The SpeechSynthesis access can be used to determine user's location when using VPN. Currently it is the only thing that (in my case) exposes this as defalut language/timezone can be changed but not installed speech (in Windows). Default speech package can not be uninstalled by conventional means as far as I've tried (only new packages can be added). I dont think I ever took advantage of speechSynthesis (?), so would it be beneficial turning it off by default in Brave?

Steps to Reproduce

  1. visit https://browserleaks.com/javascript#speech
  2. see currently installed speech voice

Actual result:

Expected result:

Reproduces how often:

always

Brave 1.34.81 Chromium: 97.0.4692.99 (Official Build) (64-bit)
Revision d740da257583289dbebd2eb37e8668928fac5ead-refs/branch-heads/4692@{#1461}
OS Windows 10 Version 21H1 (Build 19043.1466)
JavaScript V8 9.7.106.19
User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36

Version/Channel Information:

  • Can you reproduce this issue with the current release?
  • Can you reproduce this issue with the beta channel?
  • Can you reproduce this issue with the nightly channel?
@rebron rebron added this to Untriaged Backlog in Security & Privacy via automation Jan 24, 2022
@ShivanKaul ShivanKaul added priority/P4 Planned work. We expect to get to it "soon". priority/P5 Not scheduled. Don't anticipate work on this any time soon. and removed priority/P4 Planned work. We expect to get to it "soon". labels Feb 15, 2022
@rebron rebron moved this from Untriaged Backlog to P5/patches-welcome in Security & Privacy May 17, 2022
@fmarier fmarier removed this from P5/patches-welcome in Security & Privacy Jul 18, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
OS/Desktop priority/P5 Not scheduled. Don't anticipate work on this any time soon. privacy
Projects
None yet
Development

No branches or pull requests

3 participants