Skip to content

Commit bd226c7

Browse files
author
Roman-Nopantski
authored
removed tor uplift investigation section
I have created three issues for tracking items of interest from the tor uplift: #7 `resistFingerprinting`, #8 `FPI` and #15 `the rest`
1 parent 5e94428 commit bd226c7

File tree

1 file changed

+1
-70
lines changed

1 file changed

+1
-70
lines changed

user.js

+1-70
Original file line numberDiff line numberDiff line change
@@ -1535,75 +1535,6 @@ user_pref("ghacks_user.js.parrot", "No no he's not dead, he's, he's restin'! Rem
15351535
// 2614: (51+) disable SPDY
15361536
// user_pref("network.http.spdy.enabled.v3-1", false);
15371537

1538-
/**- 9998: TO INVESTIGATE - TOR UPLIFT
1539-
https://wiki.mozilla.org/Security/Tor_Uplift/Tracking
1540-
// RESOLVED
1541-
// 1400's: set whitelisted system fonts only (FF52+)
1542-
// If whitelist is empty, then whitelisting is considered disabled and all fonts are allowed.
1543-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1121643
1544-
// user_pref("font.system.whitelist", "");
1545-
// 2698-append: privacy.firstparty.isolate.restrict_opener_access
1546-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1319773
1547-
// ACTIVE
1548-
// 1200's: Isolate the HSTS and HPKP cache by first party domain
1549-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1323644
1550-
// 2400's: reduce precision of time exposed by javascript
1551-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1217238
1552-
// user_pref("javascript.options.privacy.reduce_time_precision", true);
1553-
// 2699-append: resource://URIs leak
1554-
// https://trac.torproject.org/projects/tor/ticket/8725
1555-
// https://bugzilla.mozilla.org/show_bug.cgi?id=863246
1556-
// test: https://www.browserleaks.com/firefox
1557-
// ASSIGNED
1558-
// 2001: preference to fully disable WebRTC JS API
1559-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1314443
1560-
// 2699-append: enable fingerprinting resistence to WebGL
1561-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1217290
1562-
// 2699-append: checkbox in about#preferences#privacy for privacy.resistFingerprinting
1563-
// when this lands, add note to 2699
1564-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1308340
1565-
// 2699-append: use UTC timezone (spoof as UTC 0)
1566-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1330890
1567-
// 2699-append: new window sizes to round to hundreds
1568-
// Note: override values, future may enforce a select set of (inner) window measurements
1569-
// If override values are too big, the code falls back and determines it for you
1570-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1330882
1571-
// user_pref("privacy.window.maxInnerWidth", 1366);
1572-
// user_pref("privacy.window.maxInnerHeight", 768);
1573-
// BACKLOG
1574-
// 1400's: prevent local font enumeration
1575-
// https://bugzilla.mozilla.org/show_bug.cgi?id=732096
1576-
// 1800's: disable "This Plugin is Disabled" overlay
1577-
// https://bugzilla.mozilla.org/show_bug.cgi?id=967979
1578-
// user_pref("privacy.plugin_disabled_barrier.enabled", false);
1579-
// 2500's: disable/mitigate canvas fingerprinting
1580-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1041818
1581-
// 2500's: enable prompt (site permission) before allowing canvas data extraction
1582-
// https://bugzilla.mozilla.org/show_bug.cgi?id=967895
1583-
// 2600's: window.name
1584-
// https://bugzilla.mozilla.org/show_bug.cgi?id=444222
1585-
// 2698-append: checkbox in about:preferences#privacy for privacy.firstparty.isolate
1586-
// when this lands, add note to 2611
1587-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1312655
1588-
// 2698-append: FPI and HTTP Alternative Services (see 2666)
1589-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1334690
1590-
// 2698-append: FPI and SPDY/HTTP2
1591-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1334693
1592-
// 2699-append: disable keyboard fingerprinting
1593-
// Test: https://w3c.github.io/uievents/tools/key-event-viewer.html
1594-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1222285
1595-
// 2699-append: disable WebSpeech API
1596-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1333641
1597-
// see also: web speech exposes TTS engines
1598-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1233846
1599-
// 2699-append: spoof Navigator API
1600-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1333651
1601-
// 2699-append: set and enforce various prefs with privacy.resistFingerprinting
1602-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1333933
1603-
// 2699-append: bundle and whitelist fonts with privacy.resistFingerprinting
1604-
// https://bugzilla.mozilla.org/show_bug.cgi?id=1336208
1605-
***/
1606-
16071538
/**- 9999: TO INVESTIGATE - OTHER
16081539
// 1600's: restrict the contents of referrers attached to cross-origin requests (FF52+)
16091540
// 0- 1- 2-scheme+hostname+port
@@ -1631,7 +1562,7 @@ user_pref("ghacks_user.js.parrot", "No no he's not dead, he's, he's restin'! Rem
16311562
// sandbox levels (recommended to leave at what Firefox sets it to)
16321563
// http://www.ghacks.net/2017/01/23/how-to-change-firefoxs-sandbox-security-level/
16331564
// security.sandbox.content.level
1634-
***/
1565+
***/
16351566

16361567
/**- APPENDIX
16371568
A: GLOSSARY:

0 commit comments

Comments
 (0)