[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #12488 [Tor bundles/installation]: Disable dom.event.clipboardevents.enabled by default in TBB
#12488: Disable dom.event.clipboardevents.enabled by default in TBB
--------------------------------------+----------------------------------
Reporter: cypherpunks | Owner: erinn
Type: defect | Status: new
Priority: normal | Milestone:
Component: Tor bundles/installation | Version: Tor: unspecified
Keywords: | Actual Points:
Parent ID: | Points:
--------------------------------------+----------------------------------
Hi folks!
It's been established (e.g., http://beta.slashdot.org/story/129898) that
by using dom.event.clipboardevents websites are able to monitor the text
that a user cuts, copies, or pastes and record it on their system.
An option to disable this code for increased privacy led to a fix given by
https://bugzilla.mozilla.org/show_bug.cgi?id=542938, but freshly-packaged
installs of Firefox (and hence, Tor 0.2.4.22/Tor Browser Bundle 3.6.2)
come with it enabled by default.
Shouldn't we turn this off for increased privacy? I don't think it has as
much use in TBB as it does in Firefox, and could be considered a privacy
leak if the user in question is copying passwords or other sensitive data.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12488>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs