[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #3455 [Firefox Patch Issues]: Tor Browser should set SOCKS username for a request based on referer



#3455: Tor Browser should set SOCKS username for a request based on referer
----------------------------------+-----------------------------------------
 Reporter:  mikeperry             |          Owner:  mikeperry                    
     Type:  enhancement           |         Status:  new                          
 Priority:  major                 |      Milestone:  TorBrowserBundle 2.3.x-stable
Component:  Firefox Patch Issues  |        Version:                               
 Keywords:  tbb-linkability       |         Parent:  #5752                        
   Points:                        |   Actualpoints:                               
----------------------------------+-----------------------------------------

Comment(by cypherpunks):

 While this feature sounds great I have some concerns.

 From Practical Vulnerabilities of the Tor Anonymity Network...
 {{{
 Still if an adversary is aware of one or more websites of interest that
 are
 relatively unique, he can use website fingerprinting as an indicator of
 those
 users that he might want to scrutinize further. And, if he is
 sophisticated, he
 can also use machine learning techniques to improve his accuracy.
 Fortunately
 for the aware user, it is easy to defeat website fingerprinting. By
 simultaneously
 visiting multiple sites over the same Tor circuit (which Tor allows
 automatically)
 any individual fingerprint becomes hard to recognize [19].
 }}}

 If we have a separate circuit for every website doesn't this make website
 fingerprinting even easier since we can no longer visit multiple sites
 through the same circuit?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3455#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs