[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #25197 [Applications/Tor Browser]: Design document isn't precise about "Security" and "Privacy".



#25197: Design document isn't precise about "Security" and "Privacy".
--------------------------------------+--------------------------
 Reporter:  arthuredelstein           |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-spec                  |  Actual Points:
Parent ID:  #25021                    |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by traumschule):

 comment:5:ticket:25021 mentions to explain better why extensions can be
 harmful, both for security (preventing exploits) and preventing
 fingerprintability as one danger to privacy, next to leaks of personal
 information. Maybe this is good example to differentiate these concepts.

 Also trackers are a tricky topic that should be covered because
 "deactivate javascript" is the common answer to browse more safely (higher
 security), but it leads to the wrong assumption, that it helps against
 tracking (privacy) while IIUC it does not help against web bugs like
 hidden images or other resources on third party domains etc (only if
 loaded by scripts).

 This is especially important because many users (including myself) are
 trained to install "essential extensions" for privacy:
 https://riseup.net/en/better-web-browsing
 https://riseup.net/en/security/network-security/better-web-browsing
 /browser-score-card

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25197#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs