1366318 - [meta] Prevent websites from detecting private browsing

Status: NEW

(Firefox :: Private Browsing, task, P3)

Description

[08xjcec48]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
Build ID: 20170504105526

Steps to reproduce:

Use the private browsing mode to open this: https://www.bostonglobe.com/business/2017/05/16/get-ready-for-even-more-cars-boston-streets/hLt3FFNj0ISHNxFIAdKbEP/story.html


Actual results:

The website identifies that the tab is private, and hides the contents of the article.


Expected results:

Websites shouldn't be able to tell that users are browsing privately and/or force them to use regular tabs.

Comment 1

[Luke Crouch [:groovecoder]]

Marking as P3 [meta] tracking bug. As we discover specific vectors for sites to detect PBM we will file bugs under this one.

Comment 2

[08xjcec48]

The original link now works for me, not sure if because of one of my extensions.

However, this is still able to detect whether the window is private: https://codepen.io/fadupla/pen/EWxKRW

Comment 3

[Mark Baysinger]

The San Diego Union Tribune is doing this now. To reproduce, while private browsing, go to https://www.sandiegouniontribune.com/ and click on any article. I'm not sure what mechanism they are using.

Comment 4

[Simon Mainey]

This is the same issue as Bug 1506680, which has more information

Comment 5

[Kevin Brosnan [:kbrosnan]]

Closing as a duplicate of an older bug.

Comment 6

[Simon Giesecke [:sg] [he/him]]

I don't think this is a duplicate of Bug 781982. Bug 781982 is about enabling the use of IndexedDB in private browsing mode. Currently, the unavailability of IndexedDB might be used to identify private browsing mode though, so Bug 781982 might be regarded as blocking this one.

Comment 7

[Kevin Brosnan [:kbrosnan]]

There is no reason to have a meta bug with one bug being dependent. It is not a meta in that case it is a direct dupe.

Comment 8

[Simon Giesecke [:sg] [he/him]]

As comment https://bugzilla.mozilla.org/show_bug.cgi?id=1366318#c1 says, specific vectors that allow identification of private browsing mode should be filed under this one. Bug 781982 is one such vector. I am pretty sure it is not we only one, though I don't know if we have more on file.

This is logically a different thing than Bug 781982. If there really were only a single relevant vector, it might make no sense to keep this meta bug open, but it still isn't a duplicate of Bug 781982 in my understanding.

Comment 9

[Johann Hofmann [:johannh]]

I agree with Simon

Comment 11

[Kevin Brosnan [:kbrosnan]]

Updating the affected versions is not a useful change. This behavior can be seen on trunk.