<story><title>TeamViewer installs suspicious font only useful for web fingerprinting</title><url>https://www.ctrl.blog/entry/teamviewer-font-privacy.html</url></story><parent_chain><item><author>Flimm</author><text>My proposal:&lt;p&gt;1. Browsers should ship with a set of fonts used just in the web browser that web designers can count on. Right now, there isn&amp;#x27;t a font I can count on finding in Chrome on all platforms. This especially matters for non-English languages, where a different system font can lead to a website that looks very different.&lt;p&gt;2. Browsers should not load fonts installed in the operating system. It&amp;#x27;s a fingerprinting vulnerability. And it also causes issues where the system-installed font is unexpectedly different from platform to platform. For example, Arial is different across platforms, especially once you consider non-English languages.</text></item></parent_chain><comment><author>lelandfe</author><text>&amp;gt; Browsers should not load fonts installed in the operating system&lt;p&gt;Already in the works, and some browsers don’t today (eg Safari). They permit the default system fonts (eg Helvetica) but nothing more from user space.&lt;p&gt;In the future it will be a permission you grant a site: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;wicg.github.io&amp;#x2F;local-font-access&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;wicg.github.io&amp;#x2F;local-font-access&amp;#x2F;&lt;/a&gt;&lt;p&gt;It’s a great move. The benefits of local fonts are negligible and the downsides are clearly enormous</text></comment>
<story><title>TeamViewer installs suspicious font only useful for web fingerprinting</title><url>https://www.ctrl.blog/entry/teamviewer-font-privacy.html</url></story><parent_chain><item><author>Flimm</author><text>My proposal:&lt;p&gt;1. Browsers should ship with a set of fonts used just in the web browser that web designers can count on. Right now, there isn&amp;#x27;t a font I can count on finding in Chrome on all platforms. This especially matters for non-English languages, where a different system font can lead to a website that looks very different.&lt;p&gt;2. Browsers should not load fonts installed in the operating system. It&amp;#x27;s a fingerprinting vulnerability. And it also causes issues where the system-installed font is unexpectedly different from platform to platform. For example, Arial is different across platforms, especially once you consider non-English languages.</text></item></parent_chain><comment><author>josefx</author><text>&amp;gt; I can count on finding in Chrome&lt;p&gt;Not like they have any ulterior motives to ensure your users have to ping Googles font service every time they open a page. None at all.</text></comment>