[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Firefox 3.6 beta and personas

Hash: SHA1

Hello list,
I was reading this Ars Technica post:
when I saw:

"The Personas project, which was launched by Mozilla Labs in 2007, is
now an official part of the Firefox browser. Personas are lightweight
themes that allow the user to trivially skin the browser's user
interface and apply custom (usually tacky) images and colors to the tabs
and main toolbars. Mozilla maintains a Personas gallery online where
users can go to get new visual styles."

When I tested (by chance, I admit) personas back in May, just before the
italian edition of e-privacy, I've had found that the extension will
send a cookie with your ip in plain sight back to the Mozilla network.
The problem is that this cookie is not updated that often so, for a
rogue exit node spoofing/reading getpersonas.com traffic, is really too
easy to grab your untorified IP. Not to mention that I throw the
extension to the not-so-friendly-to-tor bin and I forgot about it.
Now this announcement caught my attention, so the question is: is anyone
 doing any tor tests on firefox 3.6 and/or older firefox with newer
versions of personas? I'd like to know if this behaviour is still valid :)


- --
Marco Bonetti
Slackintosh Linux Project Developer: http://workaround.ch/
Linux-live for powerpc: http://workaround.ch/pub/rsync/mb/linux-live/

My GnuPG key id: 0x0B60BC5F
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxxx with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/