[tor-bugs] #9387 [Tor Launcher]: Tor Launcher/Torbutton should provide a "Security Slider"
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue May 6 07:18:04 UTC 2014
#9387: Tor Launcher/Torbutton should provide a "Security Slider"
-------------------------+-------------------------------------------------
Reporter: | Owner: brade
mikeperry | Status: new
Type: | Milestone:
enhancement | Version:
Priority: major | Keywords: tbb-security, tbb-usability, tbb-
Component: Tor | linkability, tbb-3.0, extdev-interview
Launcher | Parent ID:
Resolution: |
Actual Points: |
Points: |
-------------------------+-------------------------------------------------
Comment (by lunar):
Replying to [comment:17 mikeperry]:
> Jesse Ruderman pointed out that there are actually several JS options we
can disable before entirely disabling javascript:
> {{{
> javascript.options.ion.content
> javascript.options.baselinejit.content
> javascript.options.asmjs
> javascript.options.typeinference.content
> }}}
>
> These should only degrade performance and not functionality. Also, they
have historically had very high vulnerability counts to date, perhaps more
so than all of the rest of JS itself.
Turning off these options degrade performance up to the point where some
JavaScript heavy websites are unusable (e.g. mega.co.nz). This might be a
source of confusion. Not working at all is easier to understand than
“appears to be working but so slow that it'll never work”.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9387#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list