Fonts blocking question

General discussion about the NoScript extension for Firefox
Post Reply
randomnoscriptuser
Posts: 2
Joined: Wed Apr 10, 2019 1:25 pm

Fonts blocking question

Post by randomnoscriptuser »

Hi,

I'm blocking fonts with Noscript in Firefox 66.0.2 but this site knows how many fonts are installed on my pc:

http://ip-check.info/?lang=en

In Tor Browser this site can't regonize how many fonts I actually have.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: Fonts blocking question

Post by barbaz »

Moving to NoScript General.

NoScript's font blocking blocks REMOTE fonts, i.e. fonts that are downloaded from a web server and used 'on-the-fly'. It doesn't block fonts that are already on your computer; you've already decided you trust those fonts enough to install them system-wide, there's no security benefit to blocking them.
*Always* check the changelogs BEFORE updating that important software!
-
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Fonts blocking question

Post by Giorgio Maone »

randomnoscriptuser wrote: Wed Apr 10, 2019 1:33 pm In Tor Browser this site can't regonize how many fonts I actually have.
In facts, the Tor Browser prevents web pages from using any system-installed font except the most common 4 (one for each "family") from being used by any page, in order to make its users more difficult to tell apart.
However you need scripts in order to enumerate the local fonts.
This however has nothing to do with blocking remote typefaces, which is what the "font" permission does in NoScript.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0
randomnoscriptuser
Posts: 2
Joined: Wed Apr 10, 2019 1:25 pm

Re: Fonts blocking question

Post by randomnoscriptuser »

Oh, You're right, it seems I misunderstood this function :)

I have "regural" Firefox and Tor Browser (both with NoScript) and I got different results at ip-check.info. I thought that NoScript blocks pages from using system-installed fonts to avoid fingerprinting. Is there any way to do this with NoScript?
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Fonts blocking question

Post by Giorgio Maone »

randomnoscriptuser wrote: Sat Apr 13, 2019 9:53 am Is there any way to do this with NoScript?
Other than disabling scripts, none.
Preventing the rendering engine from using local fonts requires forcibly "blinding" the browser about them: something which is in reach of a Firefox fork (like the Tor Browser) but not of an extension.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0
Post Reply