Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fingerprinting 3.0: enumerateDevices #8666

Closed
pes10k opened this issue Mar 12, 2020 · 1 comment
Closed

Fingerprinting 3.0: enumerateDevices #8666

pes10k opened this issue Mar 12, 2020 · 1 comment
Assignees
Labels
closed/not-actionable feature/shields/fingerprint The fingerprinting (aka: "device recognition") protection provided in Shields privacy/chromium-redqueen Work to remove privacy-harming "features" added in Chromium. privacy/tracking Preventing sites from tracking users across the web privacy privacy-pod Feature work for the Privacy & Web Compatibility pod

Comments

@pes10k
Copy link
Contributor

pes10k commented Mar 12, 2020

This is a sub-issue of the larger fingerprint defense reorganization issue: #11770

Device Querying Endpoint

MediaDevices.enumerateDevices

default protection:

  • Randomize order of output, under eTLD+1 session seed.
  • If the user hasn't given access to any media devices on this eTLD+1, then determine the label for each device by using {devicekind} - [0-9a-zA-Z]{4} chars, with the device "kind" already determined by chromium, and the 4 random characters determined by eTLD+1
  • If the user has given access to any media devices on this eTLD+1, make no changes to the device labels.

max protection:

  • Return two values, labels audioinput and audiooutput, irregardless of device capabilities.
  • Determine the label for each device by using {devicekind} - [0-9a-zA-Z]{4} chars, with the device "kind" already determined by chromium, and the 4 random characters determined by eTLD+1
@pes10k pes10k added privacy privacy/tracking Preventing sites from tracking users across the web feature/shields/fingerprint The fingerprinting (aka: "device recognition") protection provided in Shields privacy/chromium-redqueen Work to remove privacy-harming "features" added in Chromium. labels Mar 12, 2020
@bsclifton bsclifton added this to Needs triage in Chromium Rebasing via automation Mar 13, 2020
@bsclifton bsclifton moved this from Needs triage to BACKLOG - Upstream work in Chromium Rebasing Mar 13, 2020
@pes10k pes10k changed the title Randomize order of enumerateDevices Fingerprinting 2.0: enumerateDevices Apr 13, 2020
@pes10k pes10k added the privacy-pod Feature work for the Privacy & Web Compatibility pod label May 26, 2020
@pes10k
Copy link
Contributor Author

pes10k commented Apr 2, 2021

Note that some of this issue is no longer needed because of improvements from upstream (thanks Chromium team!)

@pes10k pes10k closed this as completed Apr 2, 2021
Chromium Rebasing automation moved this from BACKLOG - Upstream work to Done Apr 2, 2021
@pes10k pes10k changed the title Fingerprinting 2.0: enumerateDevices Fingerprinting 3.0: enumerateDevices Dec 14, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
closed/not-actionable feature/shields/fingerprint The fingerprinting (aka: "device recognition") protection provided in Shields privacy/chromium-redqueen Work to remove privacy-harming "features" added in Chromium. privacy/tracking Preventing sites from tracking users across the web privacy privacy-pod Feature work for the Privacy & Web Compatibility pod
Projects
Development

No branches or pull requests

2 participants