[tor-talk] google analytics says it can track across separate domains

[Mike Perry]

Thus spake Mike Perry (mikeperry at torproject.org):

> Thus spake Joe Btfsplk (joebtfsplk at gmx.com):
> 
> > A few months ago, someone raised the question of TBB or any included
> > addon not blocking web beacons / trackers and perhaps something like
> > Ghostery should be included in TBB (I think).  I asked about beacons
> > (web bugs) compromising anonymity (not to mention privacy).  Can't
> > find the post, but I believe either Mike or Roger replied that it
> > shouldn't be an issue because web beacons, like Google Analytics,
> > can't track from site to site.  Hope I've got the essence of the
> > reply correct.
> 
> Yes, that is correct. We consider the ability to link user activity
> across different url bar domains a violation of our design requirements
> (https://www.torproject.org/projects/torbrowser/design/#privacy), and
> any ability to do so is a major bug.
> 
> Unfortunately, there are a couple such bugs we're already currently
> aware of:
> https://trac.torproject.org/projects/tor/query?keywords=~tbb-linkability
> 
> We'll fix them, eventually. Help is always appreciated, though.

Oh, I should also mention
https://www.torproject.org/projects/torbrowser/design/#identifier-linkability
as the laundry list of linkability mechanisms we've already at least
partially fixed.


-- 
Mike Perry
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20120519/15198f42/attachment.pgp>