[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #13543 [- Select a component]: Tor Browser 4 loads external plugins
#13543: Tor Browser 4 loads external plugins
----------------------------------+---------------------
Reporter: cypherpunks | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: - Select a component | Version:
Keywords: | Actual Points:
Parent ID: | Points:
----------------------------------+---------------------
I have found out that Tor Browser 4.0 can play videos that older versions
of TBB couldn't. It's because the new firefox can load gstreamer plugins
into the browser and play mp4 files (inside what I believe to be HTML5
player).
I fear this means that gstreamer is able to connect directly or send
sensitive information to the server where the video file is hosted.
If you change "media.gstreamer,enabled" to "false", it prevents gstreamer
from being loaded, but it might cause fingerprinting problems.
Any thoughts on this? Should this be enabled? Or maybe change it in later
versions.
It could still be used maybe in TAILS, to make vimeo and other websites
able to play videos (using gstreamer in a more secure environment).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13543>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs