W3C home > Mailing lists > Public > public-css-archive@w3.org > January 2021

Re: [csswg-drafts] [css-color-4][css-color-adjust-1] Shielding system colors to avoid fingerprinting? (#5710)

From: Nick Doty via GitHub <sysbot+gh@w3.org>
Date: Thu, 21 Jan 2021 18:22:48 +0000
To: public-css-archive@w3.org
Message-ID: <issue_comment.created-764845677-1611253367-sysbot+gh@w3.org>
+1 that this is an information disclosure risk, not just a fingerprinting risk, especially if (as the IRC log above suggests), there are known direct cases of sites using getComputedStyle to detect whether the user has an accessibility mode turned on.

I would think that for color (as opposed to other properties that affect layout), lying in getComputedStyle is an effective mitigation, as in :visited/history sniffing.

In this case it might also require limitations on new media queries.

-- 
GitHub Notification of comment by npdoty
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5710#issuecomment-764845677 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Thursday, 21 January 2021 18:22:49 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 19 October 2021 01:31:38 UTC