[tbb-bugs] #17569 [Applications/Tor Browser]: Add uBlock Origin to the Tor Browser

[Tor Bug Tracker & Wiki]

#17569: Add uBlock Origin to the Tor Browser
-------------------------------------------------+-------------------------
 Reporter:  kernelcorn                           |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-usability tbb-security, tbb-     |  Actual Points:
  performance                                    |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by cypherpunks):

 Adding uBlock to TBB will expose its users to "fingerprinting" attack.

 uBlock + (What list) will make unique fingerprint.
 (What list) depends on what list you decide to download, and when to
 download.
 Also List supplier could add unique filter for each result to target TBB
 user.

 TBB A: Give me adblockplus.org/list.txt
 ABP Server: Here's your list. (which include this line:
 "#div#thispersonIP#7.5.6.7")

 TBB B: Give me adblockplus.org/list.txt
 ABP Server: Here's your list. (which include this line:
 "#div#thispersonIP#1.2.3.4")

 Now the 3rd party website can detect this TBB user uniquely.


 TL:DR;
 No, Don't add ublock to TBB.
 Instead, use Firefox's "built-in tracking blocklist".
 The blocklist should bundle with TBB itself(like GeoIP files) so TBB don't
 have to download these lists from internet.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17569#comment:34>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online