Re: [tor-talk] Tracking blocker (Again

[Tania Silva]

Hi Paul,

> Disconnect would be installed
> as an add-on to Firefox.  You have a standing recommendation
> that we not install add-ons to the TOR browser.  Would that
> prohibition apply to the tracking blocker Disconnect?

I think this may help you
https://tor.stackexchange.com/questions/4480/is-it-safe-to-use-adblock-plus-with-tor-browser-bundle

-- 
Tania Silva | @tdruiva
Give me a mask

D0C6 C023 0FBF F6BF CFBB  5DB5 F456 4E2A 2B20 D2F0



signature.asc
Description: OpenPGP digital signature
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

[tor-talk] Tracking blocker (Again

[Paul A. Crable]

I sent (or think I sent) this message a few weeks ago, but received no
reply.  If you can advise me on the matter I'd be very grateful.

Paul

Original message follows:

A NYT article yesterday discussed tracking blockers and
recommended Disconnect from among four candidates for
Intel-architecture computers.  Disconnect would be installed
as an add-on to Firefox.  You have a standing recommendation
that we not install add-ons to the TOR browser.  Would that
prohibition apply to the tracking blocker Disconnect?

Paul
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Tracking blocker

[Jeremy Rand]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 02/19/2016 11:44 PM, Paul A. Crable wrote:
> A NYT article yesterday discussed tracking blockers and recommended
> Disconnect from among four candidates for Intel-architecture
> computers.  Disconnect would be installed as an add-on to Firefox.
> You have a standing recommendation that we not install add-ons to
> the TOR browser.  Would that prohibition apply to the tracking
> blocker Disconnect?
> 
> Paul
> 

It's not clear to me why Disconnect and similar systems are so
popular.  My understanding is that they basically act as blacklists.
This is relatively easy for a competent attacker to bypass, and the
blacklist definitely changes your browser fingerprint compared to a
stock browser.  (Dynamic blacklists like Privacy Badger are probably
worse in terms of fingerprintability.)  Tor Browser is designed to
make tracking less effective without resorting to a blacklist [1], so
in theory you don't need a blacklist anyway.

Cheers,
- -Jeremy Rand

[1] Of course, Tor Browser is imperfect in this area, so it is at
least plausible that a blacklist might help in some limited
circumstances.  I doubt that it would be a net benefit.
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=QAd5
-END PGP SIGNATURE-
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Tracking blocker

[Seth David Schoen]

Paul A. Crable writes:

>   A NYT article yesterday discussed tracking blockers and
>   recommended Disconnect from among four candidates for
>   Intel-architecture computers.  Disconnect would be installed
>   as an add-on to Firefox.  You have a standing recommendation
>   that we not install add-ons to the TOR browser.  Would that
>   prohibition apply to the tracking blocker Disconnect?

The recommendation not to install add-ons is because they will make
your Tor browser more different from others and so potentially more
recognizable to sites you visit -- because they could look at their
logs and say "oh, that's the Tor Browser user who was also using
Disconnect!".  If you didn't use Disconnect, they wouldn't necessarily
have a straightforward way to distinguish you from any other Tor Browser
users who also visited the site, or to speculate about whether a Tor
Browser user who visited site A was also the same Tor Browser user who
visited site B.

The Tor Browser design already provides quite strong tracker protection
compared to a run-of-the-mill desktop web browser because of all of the
ways that it tries not to keep state between sessions, tries not to let
sites find out many things about your computer or browser, and tries not
to let one site see what you've done on another site.

https://www.torproject.org/projects/torbrowser/design/

If you can point out a specific way that Disconnect protects your privacy
that Tor Browser currently doesn't, or if the Disconnect developers
can think of one, it might be constructive to bring it up with the Tor
Browser developers, because they might be willing to consider adding it
as a standard feature for all users.

-- 
Seth Schoen  
Senior Staff Technologist   https://www.eff.org/
Electronic Frontier Foundation  https://www.eff.org/join
815 Eddy Street, San Francisco, CA  94109   +1 415 436 9333 x107
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

[tor-talk] Tracking blocker

[Paul A. Crable]

A NYT article yesterday discussed tracking blockers and
recommended Disconnect from among four candidates for
Intel-architecture computers.  Disconnect would be installed
as an add-on to Firefox.  You have a standing recommendation
that we not install add-ons to the TOR browser.  Would that
prohibition apply to the tracking blocker Disconnect?

Paul
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk