[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #18361 [Tor Browser]: Issues with corporate censorship and mass surveillance
#18361: Issues with corporate censorship and mass surveillance
------------------------------------------+--------------------------
Reporter: ioerror | Owner: tbb-team
Type: enhancement | Status: new
Priority: High | Milestone:
Component: Tor Browser | Version:
Severity: Critical | Resolution:
Keywords: security, privacy, anonymity | Actual Points:
Parent ID: | Points:
Sponsor: |
------------------------------------------+--------------------------
Comment (by garrettr):
Replying to [comment:82 jgrahamc]:
> To summarize:
>
> 0. We fixed the bug that caused a new CAPTCHA to be served for a site
when the circuit changes.
For what it's worth, at least of right now, this is still an issue. To
demonstrate, I recorded a video of myself using Tor Browser to access
https://cloudflare.com, which is naturally behind Cloudflare.
Video: https://youtu.be/HIDhYHCwUEs
This video demonstrates two things:
1. The CAPTCHAs vary in their difficulty to solve, but can be **quite**
onerous (see the first CAPTCHA that I have to solve, which takes over a
minute to do).
2. The "authenticated as a human user" state **sometimes** persists over
circuit changes, but not always. As you can see in the video, I change my
Tor circuit for cloudflare.com, and I am able to access it without re-
doing a captcha. **However**, upon changing the circuit again, I am asked
to do another CAPTCHA. After solving that CAPTCHA, and changing the Tor
circuit yet again, I am forced asked to do **yet another** CAPTCHA.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18361#comment:101>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs