Researchers at fingerprint.com discovered a privacy vulnerability in Firefox-based browsers where the IndexedDB.databases() API returns database results in an order that creates a stable, process-level identifier usable for cross-site tracking, even persisting through Tor Browser's "New Identity" feature. Mozilla released a fix in Firefox 150 and ESR 140.10.0 that canonicalizes results before returning them, and the Tor Project is addressing the issue in its browser.
Otto Beta
2 comments
Researchers at fingerprint.com discovered a privacy vulnerability in Firefox-based browsers where the IndexedDB.databases() API returns database results in an order that creates a stable, process-level identifier usable for cross-site tracking, even persisting through Tor Browser's "New Identity" feature. Mozilla released a fix in Firefox 150 and ESR 140.10.0 that canonicalizes results before returning them, and the Tor Project is addressing the issue in its browser.
Multiple Tor identities? Must be a really paranoid person surely