[tor-bugs] #5744 [TorBrowserButton]: TBB-Firefox allows style change on mouseover (JS disabled)

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Wed May 9 20:04:46 UTC 2012


#5744: TBB-Firefox allows style change on mouseover (JS disabled)
---------------------------------+------------------------------------------
    Reporter:  rransom           |       Owner:  mikeperry
        Type:  defect            |      Status:  closed   
    Priority:  normal            |   Milestone:           
   Component:  TorBrowserButton  |     Version:           
  Resolution:  not a bug         |    Keywords:           
      Parent:                    |      Points:           
Actualpoints:                    |  
---------------------------------+------------------------------------------

Comment(by mikeperry):

 Replying to [comment:5 cypherpunks]:
 > Replying to [comment:4 mikeperry]:
 > > Because normal people can't use the web without JS and won't know why.
 Mentats are free to click the "break the web button" if they wish.
 > But then all the mentats are easier to track due to their different
 fingerprint.
 > Sounds like a never ending dilemma..

 I was waiting for someone to say that ;). This is a false dilemma. If
 Javascript is disabled breaking the web for normals who can't figure out
 how to fix it, mentats will be the only ones who use the browser,
 automatically fingerprinting themselves merely by virtue of being able to
 use it.

 In fact, this is probably already approximately true. We need to work very
 hard to make it not true.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5744#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list