[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #3455 [Firefox Patch Issues]: Tor Browser should set SOCKS username for a request based on referer
#3455: Tor Browser should set SOCKS username for a request based on referer
----------------------------------+-----------------------------------------
Reporter: mikeperry | Owner: mikeperry
Type: enhancement | Status: new
Priority: major | Milestone: TorBrowserBundle 2.3.x-stable
Component: Firefox Patch Issues | Version:
Keywords: tbb-linkability | Parent: #5752
Points: | Actualpoints:
----------------------------------+-----------------------------------------
Comment(by cypherpunks):
While this feature sounds great I have some concerns.
From Practical Vulnerabilities of the Tor Anonymity Network...
{{{
Still if an adversary is aware of one or more websites of interest that
are
relatively unique, he can use website fingerprinting as an indicator of
those
users that he might want to scrutinize further. And, if he is
sophisticated, he
can also use machine learning techniques to improve his accuracy.
Fortunately
for the aware user, it is easy to defeat website fingerprinting. By
simultaneously
visiting multiple sites over the same Tor circuit (which Tor allows
automatically)
any individual fingerprint becomes hard to recognize [19].
}}}
If we have a separate circuit for every website doesn't this make website
fingerprinting even easier since we can no longer visit multiple sites
through the same circuit?
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3455#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs