Smooth scrolling enabled with Fingerprinting off
Categories
(Core :: Privacy: Anti-Tracking, defect)
Tracking
()
People
(Reporter: jurajkatalinic, Unassigned)
References
Details
User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0
Steps to reproduce:
- Go to "about:config"
- Search for "privacy.resistFingerprinting"
- Set "privacy.resistFingerprinting" to "true"
- Try changing the Smooth scrolling option in General settings
Actual results:
Smooth scrolling is constantly enabled.
Expected results:
Smooth scrolling should be enabled or disabled based on the ticked or unticked box.
|
||
Comment 1•2 months ago
|
||
The Bugbug bot thinks this bug should belong to the 'Core::Privacy: Anti-Tracking' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.
|
||
Comment 2•2 months ago
•
|
||
This is working as intended. Being able to flip smooth scrolling can be used for fingerprinting. privacy.resistFingerprinting is there to do no compromises on fingerprintability and overwrite user settings to reduce the fingerpint. See Bug 1832598 comment 2. The pref is also not supported by Firefox, but it is there for Tor Browser.
privacy.fingerprintingProtection is the fingerprinting pref supported by Firefox does still allow flipping the pref.
We could consider disabling the pref to show that it is not flipable with fingerprinting protection disabled, but the behavior is likely to stay.
|
|
||
Comment 3•2 months ago
|
||
Ok, I was wrong. I've read the bug to fast (mostly due to submitting the comment too early, sorry!). Reading the Toms comment again it seems like it was initially planned to be still overwriteable.
However, the behavior was intentionally changed in Bug 1834307 (see comment 3 to comment 6).
See also Bug 1928570 comment 16 which explains the reasoning. Closing as duplicate of that bug.
The Resist Fingerprinting mode does override many settings of the browser, including Smooth Scroll (and other accessibility-related preferences.) This is by design, and one of the reasons why Mozilla/Firefox does not recommend using Resist Fingerprinting, and why it is an about:config setting and not exposed via Browser Settings/Preferences. More details are available at https://support.mozilla.org/en-US/kb/resist-fingerprinting
Due to resist-fingerprinting overwriting multiple prefs, I do think disabling the pref in about:preferences isn't best done in this Bug. But could be considered in the future. (Needs a meta-bug/small project to figure out affected patches. Or take a look at prefs that are removed in Tor Browser).
Description
•