[tor-bugs] #13543 [- Select a component]: Tor Browser 4 loads external plugins

[Tor Bug Tracker & Wiki]

#13543: Tor Browser 4 loads external plugins
----------------------------------+---------------------
 Reporter:  cypherpunks           |          Owner:
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:
Component:  - Select a component  |        Version:
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
----------------------------------+---------------------
 I have found out that Tor Browser 4.0 can play videos that older versions
 of TBB couldn't. It's because the new firefox can load gstreamer plugins
 into the browser and play mp4 files (inside what I believe to be HTML5
 player).
 I fear this means that gstreamer is able to connect directly or send
 sensitive information to the server where the video file is hosted.
 If you change "media.gstreamer,enabled" to "false", it prevents gstreamer
 from being loaded, but it might cause fingerprinting problems.

 Any thoughts on this? Should this be enabled? Or maybe change it in later
 versions.

 It could still be used maybe in TAILS, to make vimeo and other websites
 able to play videos (using gstreamer in a more secure environment).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13543>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online