Re: [tbb-dev] jshooks?

Hi,

Arthur D. Edelstein:

3. In general, what's the approach for deciding whether to patch

Mozilla C++ code vs torbutton JS code for anti-fingerprinting and similar bugs? I understand there is a desire to move more toward C++, but I'm not sure what the overall plan is.

jshooks.js and jshooks4.js are not used anymore mainly due to:

1) there were subtle breakages in the hooks between Firefox versions due to changes in the JS engine code.

2) It turned out that even those sophisticated hooks could get bypassed (see https://bugs.torproject.org/5857). Thus:

"We've given up on JS hooks. They've since been removed." (#5857, comment 6)

So, the current plan is to patch things directly in Fx source code and get that merged upstream in a way usable by us as fast as possible.

Georg