[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #5273 [Firefox Patch Issues]: Update TBB design doc for 2.3.x-alpha
#5273: Update TBB design doc for 2.3.x-alpha
----------------------------------+-----------------------------------------
Reporter: mikeperry | Owner: mikeperry
Type: defect | Status: new
Priority: major | Milestone: TorBrowserBundle 2.3.x-stable
Component: Firefox Patch Issues | Version:
Keywords: MikePerry201207 | Parent:
Points: | Actualpoints:
----------------------------------+-----------------------------------------
Comment(by gk):
Replying to [comment:15 mikeperry]:
> Additionally, it occurs to me that I should probably sit down and
actually make an example context menu for my mockup privacy UI. It would
contain choices such as:
> * Remove all site history and data [mapped to delete key]
> * Clear Tracking Data
> * Protect site data during New Identity
> * ------------
> * Block advertising from site
> * Beg site for privacy (aka "Do Not Track")
> * Allow Plugins and other Media Content
>
> The reason to put the beggar's header, the adblocker, and the plugin
control on a per site basis is to avoid the fingerprinting due to global
prefs.
Maybe I am bit slow here but could you explain the fingerprinting risks
you see for TBB users a bit? Offering these options seems rather to
introduce fingerprinting issues as users choosing them are not in the
default set anymore. Let alone the option for bad exits to test whether
users are deploying the same filterlists and if not separating them and so
on...
> I still hate the beggar's header and dislike the adblocker ideas, but
siloing them per url bar at least mitigates the damage they can do. The
per-site adblocker might also drive per-site incentive for ads to not suck
more than a global adblocker would.
I am lost here as well. But maybe your ideas are due to the "Correlate
activity across multiple site visits" adversary goal you thought about
adding for completeness' sake? If so, I do not see how options buried in a
context menu which are off by default could defend against it.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5273#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs