Fingerprinting 2.0: WebGL2

[pes10k]

This is a sub-issue of the larger fingerprint defense reorganization issue: #8787

Previous implementation blocked all WebGL-specific parameters, at max level only, and did nothing at default level.

New implementation:

At max level, block these WebGL2-specific parameters:

• version
• shading language version
• read buffer binding
• write buffer binding
• framebuffer binding
• max vertex uniform components
• max vertex uniform blocks
• max vertex output components
• max varying components
• max transform feedback interleaved components
• max fragment uniform components
• max fragment uniform blocks
• max fragment input components
• max uniform buffer bindings
• max combined uniform blocks
• max combined vertex uniform components
• max combined fragment uniform components

At default level, farble these WebGL2-specific parameters:

• max vertex uniform components
• max vertex uniform blocks
• max vertex output components
• max varying components
• max transform feedback interleaved components
• max fragment uniform components
• max fragment uniform blocks
• max fragment input components
• max uniform buffer bindings
• max combined uniform blocks
• max combined vertex uniform components
• max combined fragment uniform components

[LaurenWags]

@pes10k @pilgrim-brave could one of you confirm the test plan? I don't see anything for WebGL2 on https://dev-pages.bravesoftware.com/farbling.html / https://dev-pages.brave.software/farbling.html. Is there something different we should do to check this one?

[pes10k]

Test plan is to review the "WebGL2 Params" row on https://dev-pages.brave.software/farbling.html and make sure they match on the same page, but differ across pages CC @pilgrim-brave

@LaurenWags if that looks good to you, i think we're good to go!

[LaurenWags]

@pes10k thanks for getting that added! I do have a question about your setup on the test pages, looks like you've got 1.18 listed but this issue in 1.17.x:

Can this issue be tested with 1.17.x or should I log a placeholder for it to be tested with 1.18.x?

[pes10k]

ah good point @LaurenWags , i tagged it as current nightly, not as the release when the code landed… d'oh. Fixed!

[LaurenWags]

Verified passed with

Brave | 1.17.62 Chromium: 86.0.4240.185 (Official Build) dev (x86_64)
-- | --
Revision | 37e6f852ed18086458552039ad26421aa9fc7acc-refs/branch-heads/4240@{#1377}
OS | macOS Version 10.14.6 (Build 18G6032)

Verified test plan from #9189 (comment). Note, confirmed with @pes10k that when FP=strict, WebGL2 values "should be the same over all domains, since we’re just blocking each request in strict mode (so the same value is just the “blocked” value)". As you will see in screenshots below, the "strict" value differs from "shields down" and "standard" values as expected.

Shields Down

Fingerprinting = standard

Fingerprinting = strict

---

Verification passed on

Brave	1.17.62 Chromium: 86.0.4240.185 (Official Build) dev (64-bit)
Revision	37e6f852ed18086458552039ad26421aa9fc7acc-refs/branch-heads/4240@{#1377}
OS	Windows 7 Service Pack 1 (Build 7601.24544)

Verified test plan from #9189 (comment).

Shields Down

Fingerprinting = standard

Fingerprinting = strict

---

Verification passed on

Brave	1.17.59 Chromium: 86.0.4240.183 (Official Build) dev (64-bit)
Revision	0b568b034b8f7994697cb341eeca5979b84151cc-refs/branch-heads/4240@{#1374}
OS	Ubuntu 18.04 LTS

Verified test plan from #9189 (comment).

Shields Down

Fingerprinting = standard

Fingerprinting = strict

[srirambv]

Verification passed on OnePlus 6T with Android 10 running 1.17.66 x64 build

• Verified test plan from Fingerprinting 2.0: WebGL2 #9189 (comment)

Shields Down

dev-page.bravesoftware.com/farbling.html	https://dev-pages.brave.software/farbling.html

Fingerprinting Blocked(Standard)

https://dev-page.bravesoftware.com/farbling.html	https://dev-pages.brave.software/farbling.html

Fingerprinting Blocked(Strict)

https://dev-page.bravesoftware.com/farbling.html	https://dev-pages.brave.software/farbling.html

---

Verification passed on Samsung Tab A with Android 10 running 1.17.66 x64 beta build

Shields Down

https://dev-page.bravesoftware.com/farbling.html	https://dev-pages.brave.software/farbling.html

Fingerprinting Blocked(Standard)

https://dev-page.bravesoftware.com/farbling.html	https://dev-pages.brave.software/farbling.html

Fingerprinting Blocked(Strict)

https://dev-page.bravesoftware.com/farbling.html	https://dev-pages.brave.software/farbling.html