Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

restrict access to navigator.mediaDevices.enumerateDevices #5612

Closed
pes10k opened this issue Aug 9, 2019 · 1 comment
Closed

restrict access to navigator.mediaDevices.enumerateDevices #5612

pes10k opened this issue Aug 9, 2019 · 1 comment
Labels
feature/shields/fingerprint The fingerprinting (aka: "device recognition") protection provided in Shields priority/P3 The next thing for us to work on. It'll ride the trains. privacy/chromium-redqueen Work to remove or improve privacy-harming "features" added in Chromium. privacy/tracking Preventing sites from tracking users across the web privacy
Milestone
Closed / Dupe / I...

Comments

@pes10k
Copy link
Contributor

pes10k commented Aug 9, 2019

window.navigator.mediaDevices.enumerateDevices allows a site, unpermissioned, to learn a about device capabilities (number and category [video,audio,etc]) of available devices.

Its a nasty, used in the wild FP vector. We should gate it behind similar permissions, or otherwise restrict its access.

Mozilla is working on some similar approaches
https://bugzilla.mozilla.org/show_bug.cgi?id=1397978
https://bugzilla.mozilla.org/show_bug.cgi?id=1528042

Related: #2655
@pes10k pes10k added privacy privacy/tracking Preventing sites from tracking users across the web feature/shields/fingerprint The fingerprinting (aka: "device recognition") protection provided in Shields labels Aug 9, 2019
@pes10k pes10k changed the title navigato restrict access to navigator.mediaDevices.enumerateDevices Aug 9, 2019
@tildelowengrimm tildelowengrimm added the priority/P3 The next thing for us to work on. It'll ride the trains. label Aug 12, 2019
@tildelowengrimm tildelowengrimm added the privacy/chromium-redqueen Work to remove or improve privacy-harming "features" added in Chromium. label Feb 19, 2020
@pes10k pes10k mentioned this issue Mar 12, 2020
Closed
@pes10k
Copy link
Contributor Author

pes10k commented Apr 13, 2020

closing in favor of #8666, which describes the farbling approach we'll use going forward

@pes10k pes10k closed this as completed Apr 13, 2020
@bbondy bbondy added this to the Closed / Invalid milestone Jun 3, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
feature/shields/fingerprint The fingerprinting (aka: "device recognition") protection provided in Shields priority/P3 The next thing for us to work on. It'll ride the trains. privacy/chromium-redqueen Work to remove or improve privacy-harming "features" added in Chromium. privacy/tracking Preventing sites from tracking users across the web privacy
Projects
None yet
Milestone
Closed / Dupe / Invalid
Development

No branches or pull requests
3 participants
@pes10k @tildelowengrimm @bbondy