[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs
#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
--------------------------------------+-----------------------------------
Reporter: cypherpunks | Owner: tbb-team
Type: defect | Status: needs_information
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+-----------------------------------
Comment (by adrelanos):
Could this be related to or being a duplicate or regression of #27401?
Replying to [comment:4 cypherpunks]:
> Simmer down gk, adrelanos wasn't contesting those things but merely
reminding the OP about them :)
Indeed.
Replying to [comment:3 gk]:
> Replying to [comment:2 adrelanos]:
> > > Tor Browser in Whonix blocks JavaScript (only when started for the
first time) and in DispVMs
> >
> > > There is a long standing issue with Tor Browser that I reported to
Whonix, but they say that it is an upstream issue.
> >
> > Citation required.
> >
> > "blocks JavaScript (only when started for the first time)" - No, I
don't think this is an issue caused by Tor Browser which Tor Project could
fix. Except, if
> >
> > > If you take the Tor Browser as we ship it (by downloading it from
our website and extracting it) and run that inside your environment, does
this happen as well?
> >
> > above quote was the case.
>
> Could you make your point a bit clearer here? I was trying to figure out
whether the Tor Browser as we offer it from our website is giving the same
behavior as the software Whonix is shipping (which I don't know anything
about), but I am still not sure what the answer here is.
I can't reproduce this. Only reporter can confirm.
> as the software Whonix is shipping (which I don't know anything about)
Btw the differences are here:
https://www.whonix.org/wiki/Tor_Browser#Tor_Browser_Bundle_versus_Whonix_Tor_Browser
And here:
#19652 (which still up to date)
> > There are other recent changes and decisions by Tor Project which
often cause questions. List of things up to The Tor Project having decided
for now at the time of writing:
> >
> > * not enable to set noscript to blocking of all scripts globally by
default,
>
> That's not a recent decision or change but has been that way forever,
see our FAQ entry: https://support.torproject.org/#tbb-34
Indeed, however users often bring it up and blame it on Whonix.
> > * not persist noscript per-site settings by default,
>
> Per-site permissions saved by default would risk making you linkability
across different website because you probably have a non-generic
whitelist. But if someone really wants that then there is a pref you can
flip. See: #27175 for the full discussion.
Not contesting that. Even have that in Whonix documentation:
https://www.whonix.org/wiki/Tor_Browser#NoScript_Custom_Setting_Persistence
> > * remove noscript from Tor Browser menu bar by default.
>
> #25658 is the ticket you want and proposal 101
(https://gitweb.torproject.org/tor-browser-spec.git/tree/proposals/101
-security-controls-redesign.txt) for more background. You can follow the
tbb-dev list for proposal discussions like that one. This feature has been
in the works for months.
Not contesting that either (would create a ticket if I had a suggestion)
but good to have the links to further information so we can link it from
Whonix documentation.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31094#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs