[tor-bugs] #4280 [Tor Browser]: build changes for TBB

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Fri Oct 21 08:22:47 UTC 2011


#4280: build changes for TBB
-------------------------+--------------------------------------------------
 Reporter:  ioerror      |          Owner:  mikeperry
     Type:  defect       |         Status:  new      
 Priority:  normal       |      Milestone:           
Component:  Tor Browser  |        Version:           
 Keywords:               |         Parent:           
   Points:               |   Actualpoints:           
-------------------------+--------------------------------------------------
Changes (by mikeperry):

 * cc: mikeperry (added)


Comment:

 You already get arbitrary code long before you get to ctypes. As soon as
 you get any sort of JS running with XPCOM privs, it is game over.
 Disabling ctypes just makes it impossible for people to run addons like
 Moxie's Convergence in TBB. It's not terribly safe for them to do it
 anyway, but at least we should not require they rebuild TBB to test it and
 other addons for us.

 The WifiIO has similar uses in extensionland to detect network changes.
 And why is location data necessarily deanonymizing if you enable it
 temporarily in emergency situations while on the road? I've done this from
 time to time while traveling. It can be very handy.

 Does it actually make the build smaller? If not, who cares? All of it is
 dealt with in extensionland via torbutton.

 Disabling everything in two places just makes our job harder if we want to
 use that functionality later, or if users insist on testing new and
 exciting configurations for us.

 Nearly everything on this list is something we've contemplated using at
 one point or another, except strip, parental controls, and disk-cache. And
 does the disk-cache option really disable just the disk cache, or the
 memory cache too?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4280#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list