[tor-commits] [torbutton/master] Update Firefox bugs.
mikeperry at torproject.org
mikeperry at torproject.org
Fri Mar 25 23:35:13 UTC 2011
commit 9fcda9a81ac214101ac06995b70a43e07b63045f
Author: Mike Perry <mikeperry-git at fscked.org>
Date: Fri Mar 25 16:23:30 2011 -0700
Update Firefox bugs.
---
website/design/design.xml | 55 ++++++++++++++++++---------------------------
1 files changed, 22 insertions(+), 33 deletions(-)
diff --git a/website/design/design.xml b/website/design/design.xml
index 22199ff..3f906b3 100644
--- a/website/design/design.xml
+++ b/website/design/design.xml
@@ -11,7 +11,7 @@
<address><email>mikeperry.fscked/org</email></address>
</affiliation>
</author>
- <pubdate>Jun 28 2010</pubdate>
+ <pubdate>Mar 25 2011</pubdate>
</articleinfo>
<sect1>
@@ -2070,34 +2070,6 @@ they are:
</para>
<orderedlist>
-
-<!--
-
-XXX: We should just consider this one fixed. FF3.0 is pretty much at EOL.
-
- <listitem><ulink
-url="https://bugzilla.mozilla.org/show_bug.cgi?id=392274">Bug 392274 - Timezone
-config/chrome API</ulink>
- <para>
-
-The lack of a config or API to configure the timezone requires Torbutton to
-<link linkend="jshooks">insert client content window javascript</link> to hook
-the Date object. Additionally, a way to <ulink
-url="http://pseudo-flaw.net/tor/torbutton/unmask-date.html">remove the Date
-hooks</ulink> was discovered by Greg Fleischer. Worse, on Firefox 3,
-javascript sandboxing prevents most of the javascript hooks from being
-installed, including the Date hooks. On Windows and Linux, you can set the TZ
-environment variable to "UTC" as a workaround. Firefox will obey this
-environment variable for your Timezone on those platforms, but on Windows this
-does not take effect until browser restart. A fix for this has landed in
-Firefox 3.5, but still has not been backported to Firefox 3.0. The lack of an
-easy way to reliably spoof the timezone interferes with Torbutton's ability to
-fulfill its <link linkend="location">Location Neutrality</link> requirement.
-
-
- </para>
- </listitem>
--->
<listitem><ulink
url="https://bugzilla.mozilla.org/show_bug.cgi?id=429070">Bug 429070 - exposing
Components.interfaces to untrusted content leaks information about installed
@@ -2134,11 +2106,16 @@ provides a large amount of identifiable information</ulink>
As <link linkend="fingerprinting">mentioned above</link>, a large amount of
information is available from <ulink
url="http://developer.mozilla.org/en/docs/DOM:window.screen">window.screen</ulink>.
+The most sensative data to anonymity is actually that which is not used in
+rendering - such as desktop resolution, and window decoration size.
Currently, there is no way to obscure this information without Javascript
-hooking. This bug is a feature request to provide some other method to change
-these values. This bug interferes with Torbutton's ability to fulfill its
-<link linkend="setpreservation">Anonymity Set Preservation</link>
-requirement.
+hooking. In addition, many of this same desktop and window decoration
+resolution information is available via <ulink
+url="https://developer.mozilla.org/En/CSS/Media_queries">CSS Media
+Queries</ulink>, so perhaps some more lower-level rendering controls or
+preferences need to be provided. These issues interfere with Torbutton's
+ability to fulfill its <link linkend="setpreservation">Anonymity Set
+Preservation</link> requirement.
</para>
</listitem>
@@ -2180,6 +2157,18 @@ linkend="setpreservation">Anonymity Set Preservation</link> requirement.
</para>
</listitem>
+ <listitem><ulink
+url="https://bugzilla.mozilla.org/show_bug.cgi?id=122752">SOCKS
+Username/Password Support</ulink>
+ <para>
+We need <ulink url="https://developer.mozilla.org/en/nsIProxyInfo">Firefox
+APIs</ulink> or about:config settings to conrol the SOCKS Username and
+Password fields. The reason why we need this support is to utilize an (as yet
+unimplemented) scheme to separate Tor traffic based <ulink
+url="https://gitweb.torproject.org/torspec.git/blob_plain/HEAD:/proposals/171-separate-streams.txt">on
+SOCKS username/password</ulink>.
+ </para>
+ </listitem>
<listitem><ulink
url="https://bugzilla.mozilla.org/show_bug.cgi?id=409737">Bug 409737 -
More information about the tor-commits
mailing list