[tor-bugs] #10399 [Tor bundles/installation]: Tor Browser should be visually distinguished from Firefox to prevent user error

[Tor Bug Tracker & Wiki]

#10399: Tor Browser should be visually distinguished from Firefox to prevent user
error
------------------------------------------+---------------------------
     Reporter:  ageisp0lis                |      Owner:  erinn
         Type:  enhancement               |     Status:  new
     Priority:  trivial                   |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:  tbb-usability
Actual Points:                            |  Parent ID:
       Points:                            |
------------------------------------------+---------------------------

Comment (by dwt):

 Bringing in my comment from #10642:

 -- snip --

 The Tor browser should have a clear visual distinction to the normal
 browser, to help prevent the user mixing it up with the normal Firefox
 instance he is running and thus inadvertently loosing anonymity without
 wanting to.
 I know myself, I will mix this up many times, so I need all the help I can
 get in not getting the two confused and giving up my privacy without
 wanting to.

 I see several facets here:

  * For me as a user who does not need to fear shoulder surfing or imminent
 inspection of my machine from an adversary, a firefox theme that is
 clearly marked as TOR is perfect. Examples ​https://addons.mozilla.org/en-
 US/firefox/addon/tor-browser-c/ ​https://addons.mozilla.org/en-
 US/firefox/addon/tor-browser-b/ I would prefer something a little better
 integrated with system colors though for improved readability.

  * For a user who has to fear shoulder surfing something more subtle would
 be preferable, I would suggest something that is visually very distinct
 but doesn't hint at the TorProject directly.
 When you install TorBrowser for the first time, it already asks some setup
 questions (like: do you need a proxy). That would be a good time to offer
 a choice of themes to. Perhaps asking for a threat profile is a bit much.
 The end result should however definitely be that the Tor Browser is
 visually very distinct to the regular browser.

 -- snap --

 In response to cypherpunks:

 It is a luxury to be able to only use Tor browser that I do not have and
 also one that I do not think is sensible. If I want to appear in Public
 with my name, I do not want to use the Tor-Browser because I want to
 absolutely make sure that there is no tracking that can link my public
 name to any of the secret identities. So especially for operational
 security I think it is important that the two can easily be made visually
 distinct.

 I do agree that doing it via Theme and having an obvious advertising for
 the Tor-Browser is not the right thing for every circumstance, so perhaps
 something more subtle should be the default. Still it should be different
 than standard Firefox. I would argue that the fact that Firefox is already
 theme able and that themes are used by many people gives enough plausible
 deniability for a different theme to make this a viable option for the Tor
 project.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10399#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online