building pages with tor in mind

James Muir jamuir at scs.carleton.ca
Tue Feb 27 16:13:52 UTC 2007


Bryan Fordham wrote:
> on a more general note: Does anyone actually have an example of how 
> javascript can compromise your anonymity? Not "it can obtain your 
> IP"-type stuff, but actual code.

I have some examples here:

http://www.ccsl.carleton.ca/~jamuir/mirror.php

I have yet to see an example of pure JavaScript code that can read an 
end-user's IP address.  Any code I've seen returns either "localhost" or 
"127.0.0.1".

-James



More information about the tor-talk mailing list