[tbb-dev] jshooks?

[Georg Koppen]

Hi,

Arthur D. Edelstein:
> 3. In general, what's the approach for deciding whether to patch
> Mozilla C++ code vs torbutton JS code for anti-fingerprinting and
> similar bugs? I understand there is a desire to move more toward C++,
> but I'm not sure what the overall plan is.

jshooks.js and jshooks4.js are not used anymore mainly due to:

1) there were subtle breakages in the hooks between Firefox versions due
to changes in the JS engine code.

2) It turned out that even those sophisticated hooks could get bypassed
(see https://bugs.torproject.org/5857). Thus:

"We've given up on JS hooks. They've since been removed." (#5857, comment 6)

So, the current plan is to patch things directly in Fx source code and
get that merged upstream in a way usable by us as fast as possible.

Georg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tbb-dev/attachments/20140602/9ff32a52/attachment.sig>