Re: [tor-bugs] #26189 [Applications/Tor Browser]: Remove our content policy hack for #8725

[Tor Bug Tracker & Wiki]

#26189: Remove our content policy hack for #8725
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  task | Status:  closed
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  ff60-esr, tbb-torbutton, |  Actual Points:
  TorBrowserTeam201808R  |
Parent ID:  #26544   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 Thanks. Merged to `master` (commit
 b9b87bcb3105e7aafb42f162b4bb1e8fc7dc54ba).

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26189 [Applications/Tor Browser]: Remove our content policy hack for #8725

[Tor Bug Tracker & Wiki]

#26189: Remove our content policy hack for #8725
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  task | Status:
 |  needs_review
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ff60-esr, tbb-torbutton, |  Actual Points:
  TorBrowserTeam201808R  |
Parent ID:  #26544   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by arthuredelstein):

 * keywords:  ff60-esr, tbb-torbutton, TorBrowserTeam201808 => ff60-esr,
 tbb-torbutton, TorBrowserTeam201808R
 * status:  needs_revision => needs_review


Comment:

 Thanks for the review. Here's a revised patch:

 https://github.com/arthuredelstein/torbutton/commit/26189+1

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26189 [Applications/Tor Browser]: Remove our content policy hack for #8725

[Tor Bug Tracker & Wiki]

#26189: Remove our content policy hack for #8725
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  task | Status:
 |  needs_revision
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ff60-esr, tbb-torbutton, |  Actual Points:
  TorBrowserTeam201808   |
Parent ID:  #26544   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  needs_review => needs_revision
 * keywords:  ff60-esr, tbb-torbutton, TorBrowserTeam201808R => ff60-esr,
 tbb-torbutton, TorBrowserTeam201808


Comment:

 Thanks, just one nit:

 I think
 {{{
 pref("extensions.torbutton.resource_and_chrome_uri_fingerprinting",false);
 }}}
 should go now as well (still available in `preferences.js`in your patch).

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26189 [Applications/Tor Browser]: Remove our content policy hack for #8725

[Tor Bug Tracker & Wiki]

#26189: Remove our content policy hack for #8725
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  task | Status:
 |  needs_review
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ff60-esr, tbb-torbutton, |  Actual Points:
  TorBrowserTeam201808R  |
Parent ID:  #26544   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by arthuredelstein):

 * keywords:  ff60-esr, tbb-torbutton, TorBrowserTeam201808 => ff60-esr,
 tbb-torbutton, TorBrowserTeam201808R
 * status:  new => needs_review


Comment:

 Here's my patch for review:

 https://github.com/arthuredelstein/torbutton/commit/26189

 I tested this patch with:
 * https://www.ducksong.com/misc/b2.html
 * https://arthuredelstein.github.io/tordemos/resource-locale.html
 * https://browserleaks.com/firefox
 and confirmed that no information is leaking, as far as these patches can
 tell.

 I also confirmed that
 https://trac.torproject.org/projects/tor/ticket/26544 is fixed with this
 patch.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26189 [Applications/Tor Browser]: Remove our content policy hack for #8725

[Tor Bug Tracker & Wiki]

#26189: Remove our content policy hack for #8725
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  task | Status:  new
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ff60-esr, tbb-torbutton, |  Actual Points:
  TorBrowserTeam201808   |
Parent ID:  #26544   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * parent:   => #26544


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26189 [Applications/Tor Browser]: Remove our content policy hack for #8725

[Tor Bug Tracker & Wiki]

#26189: Remove our content policy hack for #8725
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  task | Status:  new
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ff60-esr, tbb-torbutton, |  Actual Points:
  TorBrowserTeam201806   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * cc: vanowm (added)
 * priority:  Medium => High
 * keywords:  ff60-esr, tbb-torbutton => ff60-esr, tbb-torbutton,
 TorBrowserTeam201806


Comment:

 Resolved #24948 as duplicate.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26189 [Applications/Tor Browser]: Remove our content policy hack for #8725

[Tor Bug Tracker & Wiki]

#26189: Remove our content policy hack for #8725
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ff60-esr, tbb-torbutton   |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by gk):

 Marked #22525 as duplicate as the fix in this ticket is essentially one
 for that problem as well.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26189 [Applications/Tor Browser]: Remove our content policy hack for #8725

[Tor Bug Tracker & Wiki]

#26189: Remove our content policy hack for #8725
--+
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:  ff60-esr, tbb-
  |  torbutton
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+
 Back then Yawning implemented a hack to defend leaking installed Tor
 Browser resources to content (see: #8725). Thus got upstreamed during the
 ESR60 timeframe (https://bugzilla.mozilla.org/show_bug.cgi?id=863246) and
 is available in Tor Browser now. We can think about removing this
 workaround from Torbutton then.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs