[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-talk] Adblock Plus and Ghostery should be included in Tor bundle
Agreed about the dangers of add-ons and info here
"The Design and Implementation of the Tor Browser [DRAFT]"
not sure if maintaining ghostery or adblock via Tor is worth the trouble as they might/might not improve the user experience but they don't from my standpoint push forward the design and implementation goals. I would say a first consideration might be to address mitm attacks.
We have seen major problems with certificate authorities and most governments can write certificates. Tor has a vulnerability with mitm attacks. (everyone does) A migration towards a system like convergence (convergence.io) with a decentralized trust of SSL would probably be a good thing. Currently there are some conflicts between Tor and the convergence add-on working together but if this could be addressed or the process was internalized and if Tor was shipped with a large number of notaries (or approach this in the same way as bridges...not sure on this) then you would have a pretty complete solution.
my 2 cents
On 2/12/2012 10:29 AM, unknown wrote:
> On Sun, 12 Feb 2012 17:00:59 +0100
> Martin Hubbard <Martin.Hubbard@xxxxxx> wrote:
>> RefControl set to spoof referrer as host webroot is also useful, I think.
>> ----- Original Message -----
>> From: Brian Franklin
>> Sent: 02/12/12 09:53 AM
>> To: tor-talk@xxxxxxxxxxxxxxxxxxxx
>> Subject: [tor-talk] Adblock Plus and Ghostery should be included in Tor bundle
>> Adblock Plus and Ghostery should be included in Tor bundle Two reasons 1.
> Exit nodes and sites can make a traffic analysis
> based on unique profiles of banned urls.
> Malicious exits nodes even can inject invisible blocked patterns
> to make this analysis more active.
> Adblock and other similar user-tunable plugins should be avoided.
> Check https://www.torproject.org/projects/torbrowser/design/
> "The Design and Implementation of the Tor Browser [DRAFT]"
> tor-talk mailing list
tor-talk mailing list