[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #20019 [Applications/Tor Browser]: Proposal for TOR Browser extension
#20019: Proposal for TOR Browser extension
--------------------------------------+-----------------------------------
Reporter: SECUSO_Kristoffer | Owner: tbb-team
Type: enhancement | Status: needs_information
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+-----------------------------------
Comment (by SECUSO_Kris):
Replying to [comment:4 teor]:
> The random, persistent choice of icon is vulnerable to server probing
via HTML Canvas, and perhaps other mechanisms.
>
> If it's made persistent on disk, it's also vulnerable to file
fingerprinting, allowing forensic analysis to discover the choice of icon
even if Tor is restarted or "new identity" is chosen.
Thanks for answer. What do you think of the following idea: We keep the
highlighted password and form fields but we remove the yellow/green icons.
The warning dialogs should be fine as well because they are the same for
every user.
(Sorry for replying with a new account but I wasn't able to reset my
password)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20019#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs