[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #2148 [Torbutton]: RefSpoofer fails on 5 test cases out of 12.
#2148: RefSpoofer fails on 5 test cases out of 12.
--------------------------------+-------------------------------------------
Reporter: T(A)ILS developers | Owner: mikeperry
Type: defect | Status: new
Priority: normal | Milestone: Torbutton: 1.3
Component: Torbutton | Version: Torbutton: 1.3
Keywords: refspoofer | Parent:
--------------------------------+-------------------------------------------
Comment(by bee):
HI TAILS!!!!!!!!!!!!
Try BeeFREE!!!!!!!! my addon!!!!!!!!!
Bee FREE is able also to forge referrers ("softly" keeping the subdomains,
or "strictly", keeping only the top domains!!!!), but in its default
configuration it works removing the referrers!!!!!!!!!!! You've got to use
this key to change the way it works!!!!!!!!!!!!!!
http://honeybeenet.altervista.org/beefree/?id=114000#extensions.beefree.websites.default.header.referer.action
You can change it from the GUI too!!!!!!!!!!!!!!!!!!!!
Ha!!!! A forged referrer being send is always the hostname of the target
host you're sending the HTTP request to, so even this way of working won't
let leak information!!!!!!!!!!!!!! Filters of beefree can be configured to
remove the referrers even when you're surfing between the pages of the
same filtered website!!!!!! you've to look at the keys named
"*.header.referer.action.boost" to change this!!! this is also a per-
filter based configuration and there is no GUI for it!!!!!!! for example
you've to create this integer key
"extensions.beefree.website.generic.header.referer.action.boost" and set
it to "1" if you want to enable this feature everywhere!!!!!!! so all
referrers will be removed (or "FORGED" if you want!!!!!!!) every time on
all pages even if hosted under the same "domain.name"!!!!!!!!!!!
YEAH!!!!!!!!!!
bye!!!!!!!!!!!!
~bee!!!!!!
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2148#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs