-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Marco Bonetti wrote: (snip) > An interesting hack. > There's one "flaw": the core mechanism is javascript based, using > tobutton-dev will stop it from working :) > Some of the js code can be moved to server-side (e.g. the user-agent > query) but, again, torbutton-dev adds some nice extra protection. (snip)
True - but don't forget, best security practice when browsing through Tor, calls for not having JavaScript enabled, anyway. =;o) The user-agent part is definitely nice, though. - -- F. Fox: A+, Network+, Security+ Owner of Tor node "kitsune" http://fenrisfox.livejournal.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIVAwUBR7TghOj8TXmm2ggwAQivlw//XgSoXk9XaIxVZiV6FCF/VmGne2pq+iZM Zz2zxAGATn2dQvhv1foNYakrsv9ToqXhiuC0q0TCoP8iPbh6K3234dhatqzQZCQf jdXylpeFUEjthH4+8u/zRTuSKqsJvGDt6iH9RF6HWyjJ+LXlwyOrJErTEDeLOXCa +Ooe7wQBaAQdLi1yHXl3J7w8aw1sdmc0NeZpTbqtD6fVGvDx+0cBo8/IytiQorjl fmGpbIXdinTmDeCblu1bukkVGkXb8dy8COtTjN4sQgAaz/IQquYta8iIMSC+rsP6 UsSfreNi0KFQJOyJN0eOPHoFjpJP7tdvzlklDdt4yWcVpCJ17VSH4aNL1FcVNrj8 KeiwUN0QD71Kc4IN3bJdOCCbjCLjh81skFsVXhcd6cdBKKFcJKMBSGUeiGN+EgVY pVtVBxTBz+TPmJQPJ/5YBJRG0z45k6YV7+32DsMppI3RF7ivQPKV5o7bFf78XPUB 8zU1zHFRxcHAUa0Eq+jGyblOuUR1D4oIfkpP4JQzCtlxb6E2R5ZbIecvdrt75Ii6 4Z4onhz+aZ8Y5QPq1KM3AdhEppRJivUejZMBVVVE0jF9uFVVDqmv3fLmxi6IpDw0 w1cdbZ3IM7gyL5JY1O8Hm1WtvZ84eu3Lul/+T67u7OA+0uuSnXpfkXPNYrSESPo4 Gs9u/EJlp2Y= =WA60 -----END PGP SIGNATURE-----
