GrapheneOS / os-issue-tracker

Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
https://grapheneos.org/
349 stars 19 forks source link

Anti-Fingerprinting: Fake background colors if they are unneeded #1495

Open MatsG23 opened 1 year ago

MatsG23 commented 1 year ago

Material You generates color palettes based on your wallpaper. Every app can access the background colors APIs. The issue: this makes a user very unique if he uses an uncommon wallpaper (amount of uniqueness can be tested using this app).

I suggest that the wallpaper colors are faked to #000000 (colors of the black GrapheneOS default wallpaper) if the user chose a theming color palette not based on the wallpaper colors (see screenshot)

The Color Picker

Leonetienne commented 1 year ago

I would love to have a privacy option to spoof black for these api calls.

w9925 commented 1 year ago

Would be a realy nice feature... Many of us use black wallpaper only because of that

popogomo commented 1 year ago

I second this request. Using GOS stock wallpaper because of this. Not that I don't like it, but would be great to use any wallpaper without compromising the privacy.

ph00lt0 commented 1 year ago

This only would make sense if you restrict access to the wallpaper as well. At this point any app has access to the wallpaper picture anyway. To me that seems like a bigger deal

soupslurpr commented 2 months ago

Wouldn't it be good to also just give them the colors for the wallpaper theme chosen in the settings (default theme is derived from wallpaper, but even when changing the theme to another wallpaper based theme they can see both lock screen and home screen wallpaper colors) when using a wallpaper color theme? So when they look at the lock screen and home screen colors they always only see the chosen wallpaper theme's colors, and when choosing non-wallpaper themes ("Other colors") black can be given as the wallpaper colors as this issue says.