[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Maybe Firfox isn't the best choice for privacy?

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Maybe Firfox isn't the best choice for privacy?
From: "F. Fox" <kitsune.or@xxxxxxxxx>
Date: Thu, 14 Feb 2008 16:44:52 -0800
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Thu, 14 Feb 2008 19:45:04 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:x-enigmail-version:content-type:content-transfer-encoding; bh=39RzEr9w4T+lDofQfsHaW8BEudsRD3RXdFiSB1rgnb4=; b=UJX9nzHADFDoT9NsSkT4aUj0Vtp0FN2c4I2lq7Y5uKc3c7LvKXZj9SBOCPMUsrDA+viOwRNszCJemVnmHdFF0x/QPr3JMS2fZP4GKeR2/QCAGpZqp3nq3obrsdybPGFf+0jUuteullfQLoo8+8I+ad1q0Vb9GilevqwHji6wUhc=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:x-enigmail-version:content-type:content-transfer-encoding; b=bAgRUwB+tYw97xX+QyK7b2e9PAUbAm6GuSwMUOg9Mil4cB4vJuASElqSiqhW7CETvy7AdEc8Xu6hDRAqjEGLn6wbGo7Bh3mkErbgrWza4B57ix9msvEhMcW8yHTEK9Gd52Tm21wmY2S0g127iEBJlPOEzKk5ZnLpwjWh2UPALh8=
In-reply-to: <1513.85.18.24.140.1203002721.squirrel@xxxxxxxxxxxxxxxxxxxx>
References: <20080214161752.1cd3996b@xxxxxxxxx> <1513.85.18.24.140.1203002721.squirrel@xxxxxxxxxxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx
User-agent: Icedove 1.5.0.14pre (X11/20071018)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Marco Bonetti wrote:
(snip)
> An interesting hack.
> There's one "flaw": the core mechanism is javascript based, using
> tobutton-dev will stop it from working :)
> Some of the js code can be moved to server-side (e.g. the user-agent
> query) but, again, torbutton-dev adds some nice extra protection.
(snip)

True - but don't forget, best security practice when browsing through
Tor, calls for not having JavaScript enabled, anyway. =;o)

The user-agent part is definitely nice, though.

- --
F. Fox: A+, Network+, Security+
Owner of Tor node "kitsune"
http://fenrisfox.livejournal.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
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=WA60
-----END PGP SIGNATURE-----

References:
- Maybe Firfox isn't the best choice for privacy?
  - From: kazaam
- Re: Maybe Firfox isn't the best choice for privacy?
  - From: Marco Bonetti

Prev by Author: Re: OSI 1-3 attack on Tor? in it.wikipedia
Next by Author: Re: OSI 1-3 attack on Tor? in it.wikipedia
Previous by thread: Re: Maybe Firfox isn't the best choice for privacy?
Next by thread: Re: Maybe Firfox isn't the best choice for privacy?
Index(es):
- Author
- Thread