Firefox 3.6 beta and personas

[Marco Bonetti <marco.bonetti@xxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello list,
I was reading this Ars Technica post:
http://arstechnica.com/open-source/news/2009/11/hands-on-firefox-36-beta-supports-personas-fullscreen-video.ars
when I saw:

"The Personas project, which was launched by Mozilla Labs in 2007, is
now an official part of the Firefox browser. Personas are lightweight
themes that allow the user to trivially skin the browser's user
interface and apply custom (usually tacky) images and colors to the tabs
and main toolbars. Mozilla maintains a Personas gallery online where
users can go to get new visual styles."

When I tested (by chance, I admit) personas back in May, just before the
italian edition of e-privacy, I've had found that the extension will
send a cookie with your ip in plain sight back to the Mozilla network.
The problem is that this cookie is not updated that often so, for a
rogue exit node spoofing/reading getpersonas.com traffic, is really too
easy to grab your untorified IP. Not to mention that I throw the
extension to the not-so-friendly-to-tor bin and I forgot about it.
Now this announcement caught my attention, so the question is: is anyone
 doing any tor tests on firefox 3.6 and/or older firefox with newer
versions of personas? I'd like to know if this behaviour is still valid :)

ciao

- --
Marco Bonetti
Slackintosh Linux Project Developer: http://workaround.ch/
Linux-live for powerpc: http://workaround.ch/pub/rsync/mb/linux-live/

My GnuPG key id: 0x0B60BC5F
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkrwt0QACgkQTYvJ9gtgvF/XMACfd6WsFNSZDDPcvtkSFQKZii9p
3PcAnjgBfjzecvnezRvTJerH0xrmh75n
=9K3H
-----END PGP SIGNATURE-----
***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxxx with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/