[tor-talk] How secure is check.torproject.org?

Sebastian G. <bastik.tor> bastik.tor at googlemail.com
Sun Nov 17 21:03:34 UTC 2013


17.11.2013 20:29, author at anonymousbitcoinbook.com:
> If I were going to perform a de-anonymization attack on Tor users en
> masse, I would take advantage of the fact that TorBrowser and Tails
> Linux* both load a page with client-side scripting enabled upon startup.
> How secure is this single point of failure?
> 

It's about check.torproject.org

Without answering any of your questions let me tell you that with the
upcoming release of TBB 3.X, which should be in beta right now, the
browser will no longer visit check.torproject.org

The reason is that it is a single point of soemthing*

*failure for sure, maybe trust as well.

Regards,
Sebastian G. (aka bastik_tor)



More information about the tor-talk mailing list