From 89e0aed652e5ef13bd0c1ed4f78c4afb0cb79dee Mon Sep 17 00:00:00 2001 From: earthlng Date: Mon, 20 Nov 2017 13:49:19 +0100 Subject: [PATCH] 4600: redundant prefs due to RFP --- user.js | 28 +++++++++++++++------------- 1 file changed, 15 insertions(+), 13 deletions(-) diff --git a/user.js b/user.js index 2e3d98f..0137a78 100644 --- a/user.js +++ b/user.js @@ -1203,23 +1203,12 @@ user_pref("_user.js.parrot", "2500 syntax error: the parrot's shuffled off 'is m * [1] https://wiki.mozilla.org/Media/getUserMedia * [2] https://developer.mozilla.org/docs/Web/API/MediaDevices/enumerateDevices ***/ user_pref("media.navigator.enabled", false); -/* 2506: disable video statistics - JS performance fingerprinting (FF25+) - * [1] https://trac.torproject.org/projects/tor/ticket/15757 - * [2] https://bugzilla.mozilla.org/show_bug.cgi?id=654550 ***/ -user_pref("media.video_stats.enabled", false); /* 2508: disable hardware acceleration to reduce graphics fingerprinting * [SETTING] Options>General>Performance>Custom>Use hardware acceleration when available * [WARNING] [SETUP] Affects text rendering (fonts will look different) and impacts video performance * [1] https://wiki.mozilla.org/Platform/GFX/HardwareAcceleration ***/ // user_pref("gfx.direct2d.disabled", true); // [WINDOWS] user_pref("layers.acceleration.disabled", true); -/* 2509: disable touch events - * fingerprinting attack vector - leaks screen res & actual screen coordinates - * 0=disabled, 1=enabled, 2=autodetect - * [WARNING] [SETUP] Optional protection depending on your device - * [1] https://developer.mozilla.org/docs/Web/API/Touch_events - * [2] https://trac.torproject.org/projects/tor/ticket/10286 ***/ - // user_pref("dom.w3c_touch_events.enabled", 0); /* 2510: disable Web Audio API (FF51+) * [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1288359 ***/ user_pref("dom.webaudio.enabled", false); @@ -1569,8 +1558,8 @@ user_pref("privacy.firstparty.isolate.restrict_opener_access", true); ** 1372072 - spoof network information API as "unknown" (see 4607) (FF56+) ** 1333641 - reduce fingerprinting in WebSpeech API (see 4608) (FF56+) ** 1372069 & 1403813 - block geolocation requests (same as if you deny a site permission) (see 4609) (FF56+) - ** 1369309 - spoof media statistics (see 2506) (FF57+) - ** 1382499 - reduce screen co-ordinate fingerprinting in Touch API (see 2509) (FF57+) + ** 1369309 - spoof media statistics (see 4610) (FF57+) + ** 1382499 - reduce screen co-ordinate fingerprinting in Touch API (see 4611) (FF57+) ** 1217290 - enable fingerprinting resistance for WebGL (see 2010-12) (FF57+) ** 1382545 - reduce fingerprinting in Animation API (FF57+) ** 1354633 - limit MediaError.message to a whitelist (FF57+) @@ -1648,6 +1637,19 @@ user_pref("media.webspeech.synth.enabled", false); // [1] https://www.mozilla.org/firefox/geolocation/ user_pref("geo.enabled", false); // * * * / +// FF57+ +// 4610: [2506] disable video statistics - JS performance fingerprinting (FF25+) + // [1] https://trac.torproject.org/projects/tor/ticket/15757 + // [2] https://bugzilla.mozilla.org/show_bug.cgi?id=654550 +user_pref("media.video_stats.enabled", false); +// 4611: [2509] disable touch events + // fingerprinting attack vector - leaks screen res & actual screen coordinates + // 0=disabled, 1=enabled, 2=autodetect + // [WARNING] [SETUP] Optional protection depending on your device + // [1] https://developer.mozilla.org/docs/Web/API/Touch_events + // [2] https://trac.torproject.org/projects/tor/ticket/10286 + // user_pref("dom.w3c_touch_events.enabled", 0); +// * * * / // ***/ /*** 4700: RFP (4500) ALTERNATIVES - NAVIGATOR / USER AGENT (UA) SPOOFING