[tor-bugs] #18361 [Applications/Tor Browser]: Issues with corporate censorship and mass surveillance

[Tor Bug Tracker & Wiki]

#18361: Issues with corporate censorship and mass surveillance
------------------------------------------+--------------------------
 Reporter:  ioerror                       |          Owner:  tbb-team
     Type:  enhancement                   |         Status:  new
 Priority:  High                          |      Milestone:
Component:  Applications/Tor Browser      |        Version:
 Severity:  Critical                      |     Resolution:
 Keywords:  security, privacy, anonymity  |  Actual Points:
Parent ID:                                |         Points:
 Reviewer:                                |        Sponsor:  None
------------------------------------------+--------------------------

Comment (by cypherpunks):

 FWIW the CAPTCHAs given when JavaScript is disabled are IMO easier to
 solve than with Javascript enabled.

 Without JavaScript i get the type of CAPTCHA that simply asks me to tick
 the boxes that match the given criterion. I get to review the submission
 before actually submitting it and therefore get these right on the first
 try most of the time. With JavaScript i get the type of CAPTCHA that
 replaces the images with new ones until none match the given criterion.
 These take much longer to solve because the images are replaced multiple
 times and it seems one accidental misclick invalidates the entire CAPTCHA.

 I would appreciate it if the JavaScript version would function more like
 the non-JavaScript version in terms of ease of solving and the option to
 review submissions.

 Lastly, the non-JavaScript version requires users to submit a long code to
 authenticate them solving the CAPTCHA successfully. Since CloudFlare is a
 MITM, wouldn't CloudFlare be able to handle this submission automatically?
 This would remove one more step that users have to take.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18361#comment:234>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online