[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: building pages with tor in mind

To: or-talk@xxxxxxxxxxxxx
Subject: Re: building pages with tor in mind
From: coderman <coderman@xxxxxxxxx>
Date: Tue, 27 Feb 2007 11:01:11 -0800
Cc: or-talk@xxxxxxxx
Delivered-to: archiver@seul.org
Delivered-to: or-talk-outgoing@seul.org
Delivered-to: or-talk@seul.org
Delivery-date: Tue, 27 Feb 2007 14:01:25 -0500
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=F3cl8BI4OSQLivow4HGqFvAGIFGRCBD4Yc5acHEchamkDyalTvHk4kFS4pW3Veuo+xqH6rSGPLgf+wgiS3IpJ+wYGzAeupEXIKeY8ZO2TEpc8m6K3uRkLo31qznITPoBALlq85huHzAB6hXI8ATTpX3v5628YI76uZEgzNq4kxk=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=BOv7VG1unOJL8dH7i9h26CYc8MKEUBffBDrDiNTnPAOtVTDAQZkt6IX6un2cAURC02KfFgUlMyS8DD4MvaSVu0k0djnYa6LpJE+uCHB5cu78qPB8rinjvWSlrp6REHv0n5TUhWnGy+Mrc2cUqAucOAF7e9lzj/LC6nbP+OAusOo=
In-reply-to: <5e3f62880702270748la21e5cah3128b5643a1027df@mail.gmail.com>
References: <5e3f62880702270743q695781b2pa65194ef258bf1ef@mail.gmail.com> <5e3f62880702270748la21e5cah3128b5643a1027df@mail.gmail.com>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

On 2/27/07, Bryan Fordham <bfordham@xxxxxxxxx> wrote:

on a more general note: Does anyone actually have an example of how
javascript can compromise your anonymity? Not "it can obtain your IP"-type
stuff, but actual code.


consider the drive-by pharming style attack:
http://www.symantec.com/enterprise/security_response/weblog/2007/02/driveby_pharming_how_clicking_1.html

malicious javascript connects to your router, and if using defaults,
can open up an external telnet management service, change your DNS
server, basically leverage your router for any number of secondary
attacks.

References:
- building pages with tor in mind
  - From: Bryan Fordham
- Re: building pages with tor in mind
  - From: Bryan Fordham

Prev by Author: Re: Security concerning Tor, BitTorrent and Firewall
Next by Author: Re: Newbie's questions
Previous by thread: Re: building pages with tor in mind
Next by thread: Feb 27 03:40:25.760 [err] circuitbuild.c:2156: entry_guards_prepend_from_config: Assertion options->EntryNodes failed,; aborting.
Index(es):
- Author
- Thread