Journal d'investigation en ligne et d'information‑hacking
par bluetouff

Wordpress 4.2 : Tor Browser’s and Canvas privacy warning prompt

The Tor Browser is known to be used by activists, journalists, and people who need a high level of privacy while they're surfing. Every possible way to track people on Internet are a serious concern for the Tor developers because anonymization doesn’t support approximation and leads to take decisions that could seem "over-paranoid" to others developpers communities. Description In previous Wordpress versions (prior to 4.

The Tor Browser is known to be used by activists, journalists, and people who need a high level of privacy while they're surfing. Every possible way to track people on Internet are a serious concern for the Tor developers because anonymization doesn’t support approximation and leads to take decisions that could seem "over-paranoid" to others developpers communities.

Description

In previous Wordpress versions (prior to 4.2) Gravatar was already known to be detected as tracker by some tools like Ghostery. But with gravatars disabled, only logged in users get the warning due to the admin bar. 4.2 update on wp-includes/formatting.php introduced a new way to check if emoji are enabled or not, injecting in wp-head an emoji detection script using canvas.

`

window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/72x72\/","ext":".png","source":{"concatemoji":"https:\/\/mywebstite.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.2"}};

!function(a,b,c){function d(a){var c=b.createElement("canvas"),d=c.getContext&&c.getContext("2d");return d&&d.fillText?(d.textBaseline="top",d.font="600 32px...