-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello list, I was reading this Ars Technica post: http://arstechnica.com/open-source/news/2009/11/hands-on-firefox-36-beta-supports-personas-fullscreen-video.ars when I saw:
"The Personas project, which was launched by Mozilla Labs in 2007, is now an official part of the Firefox browser. Personas are lightweight themes that allow the user to trivially skin the browser's user interface and apply custom (usually tacky) images and colors to the tabs and main toolbars. Mozilla maintains a Personas gallery online where users can go to get new visual styles." When I tested (by chance, I admit) personas back in May, just before the italian edition of e-privacy, I've had found that the extension will send a cookie with your ip in plain sight back to the Mozilla network. The problem is that this cookie is not updated that often so, for a rogue exit node spoofing/reading getpersonas.com traffic, is really too easy to grab your untorified IP. Not to mention that I throw the extension to the not-so-friendly-to-tor bin and I forgot about it. Now this announcement caught my attention, so the question is: is anyone doing any tor tests on firefox 3.6 and/or older firefox with newer versions of personas? I'd like to know if this behaviour is still valid :) ciao - -- Marco Bonetti Slackintosh Linux Project Developer: http://workaround.ch/ Linux-live for powerpc: http://workaround.ch/pub/rsync/mb/linux-live/ My GnuPG key id: 0x0B60BC5F -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkrwt0QACgkQTYvJ9gtgvF/XMACfd6WsFNSZDDPcvtkSFQKZii9p 3PcAnjgBfjzecvnezRvTJerH0xrmh75n =9K3H -----END PGP SIGNATURE----- *********************************************************************** To unsubscribe, send an e-mail to [email protected] with unsubscribe or-talk in the body. http://archives.seul.org/or/talk/
