New issue
Advanced search Search tips

Issue 710944 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Apr 2017
Components:
EstimatedDays: ----
NextAction: 2017-04-18
OS: Mac
Pri: 2
Type: Bug



Sign in to add a comment

using java script to get browser font settings returns random value

Reported by xiaoxinw...@gmail.com, Apr 12 2017

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36

Steps to reproduce the problem:
1. write js to get browser font setting value
2. the returned value is random every time
3. 

What is the expected behavior?
The value is persistent so we will know a user is using the same device to log into a, e.g., e-commerce page, as he did before.

What went wrong?
I am with Threatmetrix, a fraud detection company. One of our key technology is to track whether a transaction is from a known device through web characteristics mapping. Font setting is one of those. We understand google does this because of privacy concern. If that is case, we wonder beside font information, what other web settings are no more available through js, i.e., parallel with this font randomization feature, what other privacy methods have been added to chrome.

Did this work before? N/A 

Chrome version: 56.0.2924.87  Channel: n/a
OS Version: OS X 10.12.3
Flash Version:
 
Components: Privacy
Labels: Needs-Feedback
NextAction: 2017-04-18
Could you please provide the code that you're using? That is in, your steps to reproduce, I'd like to better understand the specific API used in step 1.
Thanks for the reply. Unfortunately the code is production code and we
can't share it. Any high level guide on how Chrome will improve the privacy
will help. What are the data chrome will protect? Doc or link will be
helpful. Thanks.
Project Member

Comment 4 by sheriffbot@chromium.org, Apr 18 2017

Cc: dglazkov@chromium.org
Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "dglazkov@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Cc: -dglazkov@chromium.org
Components: -Blink
Removing the Blink label as this doesn't seem to be a Blink issue.

xiaoxinwu2013@gmail.com, here's the privacy guide I'd found by searching for "Chrome privacy guide": https://www.google.com/chrome/browser/privacy/

I am still uncertain of the nature of the issue, leaving it to Privacy folks to decide.

Comment 6 by battre@chromium.org, Apr 18 2017

Chrome is not using any fingerprinting thwarting technologies at the moment. Firefox is experimenting with it. https://bugzilla.mozilla.org/show_bug.cgi?id=1356381

Without additional instructions to reproduce, I suggest to close this issue as WontFix.
Status: WontFix (was: Unconfirmed)
Please open a new bug with further instructions to reproduce if the issue still occurs.

Sign in to add a comment