https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237414

            Bug ID: 237414
           Summary: www/firefox-esr: navigator.userAgent is vulnerable to
                    fingerprinting
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: [email protected]
          Reporter: [email protected]
             Flags: maintainer-feedback?([email protected])
          Assignee: [email protected]
             Flags: maintainer-feedback?

Having tested there:
https://ghacksuserjs.github.io/TorZillaPrint/TorZillaPrint.html

----Output-----
[header] http_user_agent        
[navigator] userAgent   Mozilla/5.0 (X11; FreeBSD i386; rv:60.0) Gecko/20100101
Firefox/60.0
[navigator] appCodeName Mozilla
[navigator] appName     Netscape
[navigator] product     Gecko
[navigator] appVersion  5.0 (X11)
[navigator] oscpu       Windows NT 6.0; Win64; x64
[navigator] platform    Win64
[navigator] buildID     20100101
[navigator] productSub  20100101
---browser, version, os---
[css] browser   
[error messages] browser        Firefox
---------

userAgent shows 'X11; FreeBSD i386' while oscpu seems to be faked to 'Windows
NT 6.0; Win64; x64' and ist as such not consistent.

This is *very* bad as it makes one pretty unique for browser fingerprinting

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-gecko
To unsubscribe, send any mail to "[email protected]"

Reply via email to