Re: [tor-bugs] #21555 [Applications/Tor Browser]: Twitter like button not working on 6.5

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#21555: Twitter like button not working on 6.5
-------------------------------------------------+-------------------------
 Reporter:  isabela                              |          Owner:
                                                 |  arthuredelstein
     Type:  defect                               |         Status:  closed
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:  tbb-usability-website,               |  Actual Points:
  TorBrowserTeam201703R                          |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by cypherpunks):

 Replying to [comment:18 isis]:
 > Replying to [comment:4 gk]:
 > > Could someone with Twitter presence double-check that this is not a
 6.5 regression by trying to hit the like buttons with 6.0.8?
 >
 > With `network.cookie.cookieBehavior` set to 1 on 6.0.8, both retweets
 and likes are broken. Setting the pref to 0 fixes it.

 It is disconcerting that isis posted a workaround (danke!) six weeks ago
 but didn't mention the downsides to this workaround (nicht danke!). Now
 that this is due to be fixed tomorrow (according to
 https://twitter.com/torproject/status/852640132054360064 anyway) I wonder
 how many twitter+tor users have forgotten all about this and will
 permanently leave their `cookieBehavior` set to `0`.

 For anybody reading this ticket who doesn't realize: setting
 `cookieBehavior` to `0` means that Tor Browser will send 3rd party
 cookies; eg if you're logged into twitter it will make it so that viewing
 randomwebsite.com with a "tweet" button will inform twitter that you went
 to that website (even if you don't click the button).

 I think it is a bit irresponsible of isis to recommend this workaround
 here without informing users of the risks. It seems certain that many
 people will now leave this setting changed, which negates one of big
 benefits of using Tor Browser.

 Maybe a Tor Browser upgrade should fix the damage done by this advice (and
 force the setting back to `1`)?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21555#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs