[tbb-bugs] #18361 [Tor Browser]: Issues with corporate censorship and mass surveillance

[Tor Bug Tracker & Wiki]

#18361: Issues with corporate censorship and mass surveillance
------------------------------------------+--------------------------
 Reporter:  ioerror                       |          Owner:  tbb-team
     Type:  enhancement                   |         Status:  new
 Priority:  High                          |      Milestone:
Component:  Tor Browser                   |        Version:
 Severity:  Critical                      |     Resolution:
 Keywords:  security, privacy, anonymity  |  Actual Points:
Parent ID:                                |         Points:
  Sponsor:                                |
------------------------------------------+--------------------------

Comment (by garrettr):

 Replying to [comment:82 jgrahamc]:
 > To summarize:
 >
 > 0. We fixed the bug that caused a new CAPTCHA to be served for a site
 when the circuit changes.

 For what it's worth, at least of right now, this is still an issue. To
 demonstrate, I recorded a video of myself using Tor Browser to access
 https://cloudflare.com, which is naturally behind Cloudflare.

 Video: https://youtu.be/HIDhYHCwUEs

 This video demonstrates two things:

 1. The CAPTCHAs vary in their difficulty to solve, but can be **quite**
 onerous (see the first CAPTCHA that I have to solve, which takes over a
 minute to do).
 2. The "authenticated as a human user" state **sometimes** persists over
 circuit changes, but not always. As you can see in the video, I change my
 Tor circuit for cloudflare.com, and I am able to access it without re-
 doing a captcha. **However**, upon changing the circuit again, I am asked
 to do another CAPTCHA. After solving that CAPTCHA, and changing the Tor
 circuit yet again, I am forced asked to do **yet another** CAPTCHA.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18361#comment:101>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online