Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ui.prefersReducedMotion #971

Closed
wvxwxvw opened this issue Jul 9, 2020 · 7 comments
Closed

ui.prefersReducedMotion #971

wvxwxvw opened this issue Jul 9, 2020 · 7 comments

Comments

@wvxwxvw
Copy link

wvxwxvw commented Jul 9, 2020

Twice in a document with different values. First it is enabled, and then, according to the instructions for non-RFP users, it is disabled.

@Thorin-Oakenpants
Copy link
Contributor

Thorin-Oakenpants commented Jul 9, 2020

Correct. It's disabled added as part of RFP because that comes before the one in RFP alts: it makes no sense to put it in the 5000's, inactive, and ask users to add it as an override: so it's enabled active and does not affect fingerprinting (due to RFP)

But if a user decides to disable RFP and instead they turn on the RFP Alts section, then the second value is applied last, and the fingerprinting is still covered

how a user.js works

It parses the user.js in the order it is written, i.e if the same preference is listed twice with two different values, the last one will be applied last

@rusty-snake
Copy link
Contributor

/* 4520: disable chrome animations [FF77+] [RESTART]

Where is the FPing/Security?

@Thorin-Oakenpants
Copy link
Contributor

Are you asking how PRM is fingerprintable (it is), or why it's included when all the other prefs not in 5000s have some sort of privacy/security/anti-tracking/anti-FPing aspect and this one doesn't?

@rusty-snake
Copy link
Contributor

I'm wondering why we need to disable animations for firefox. There is no security issue and I don't see the FPing (as long as RFP is used).

@Thorin-Oakenpants
Copy link
Contributor

Thorin-Oakenpants commented Jul 9, 2020

Because Mozilla tied a chrome setting to a web setting

The pref is already covered by RFP, but if we enforce it as 1 (which leaks with no RFP) then no-one will need to add it as an override to disable the megabar etc, which means anyone who then needs to flip on RFP Alts is not compromised (because the value 1 is set before the alt value 0 is set: so Alts wins)

capisce?

@crssi
Copy link

crssi commented Jul 9, 2020

@Thorin-Oakenpants Is there anything you have not think of at all? 😄 ❤️

@Thorin-Oakenpants
Copy link
Contributor

@Thorin-Oakenpants Is there anything you have not think of at all? 😄 ❤️

I forgot my mom's birthday once .. she's never let me live it down ... 47 years and counting .. *sigh*

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

4 participants