Re: [tor-talk] HTML5 video and Tor anonymity.

2013-05-17 Thread Andrew F
True, But if you use tor, and you go to news sites, youtube, vimo, or almost any TV station on the web, they want flash Today. I Don't know what will be the standard in 2 or 5 years but right now, its flash. Go to ABC and You need flash, go to NBC and you need flash, So until HTML5 takes over

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-05-17 Thread Lodewijk andré de la porte
2013/5/17 Griffin Boyce griffinbo...@gmail.com Flash isn't even as useful as current alternatives (webm video). You could make the case that Flash allows for amazing video games, but that seems like the perfect use-case for high-throughput/low-lag VPNs. I don't want to extend a discussion

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-05-01 Thread Noel David Torres Taño
On Martes, 30 de abril de 2013 19:00:20 andrew wrote: Leo, Would be possible to run flash video in a VM to isolate it? Hi Andrew Issue is not isolation from other processes, issue is that the Flash player might communicate your IP and other data to some third party (who may be the video host

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-05-01 Thread Roger Dingledine
On Wed, May 01, 2013 at 06:16:49PM +, Andrew F wrote: Thanks noel, Is there a way to sandbox flash and make it safe? Keep an eye on (and please contribute to!) https://trac.torproject.org/projects/tor/ticket/7680 and its subtickets. --Roger ___

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-05-01 Thread David Vorick
I don't know what I'm talking about, but here goes: If you were to put flash in a sandbox that had a fake IP address, might that make the sandbox incompatible with the tor network? When you are communicating, even over the tor network, your IP address is critical so that servers on the other end

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-05-01 Thread Tom Ritter
On 1 May 2013 15:29, David Vorick david.vor...@gmail.com wrote: I don't know what I'm talking about, but here goes: If you were to put flash in a sandbox that had a fake IP address, might that make the sandbox incompatible with the tor network? When you are communicating, even over the tor

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-05-01 Thread adrelanos
David Vorick: I don't know what I'm talking about, but here goes: If you were to put flash in a sandbox that had a fake IP address, might that make the sandbox incompatible with the tor network? That depends on the sandbox. If it does it right, it can be fully NATed and enforce proxy

[tor-talk] HTML5 video and Tor anonymity.

2013-04-30 Thread luis redondo
Using Tor(TBB default configuration,plugins disabled) I can see videos.I suppose that it is HTML5 videos,so,isn't the same that flash videos? and can the anonymity be compromised? More,by default,TBB accepts JavaScript running.So,I suppose JavaScript is not a great danger for Tor anonymity.Is

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-04-30 Thread Leo Unglaub
Hey, On 2013-04-30 17:03, luis redondo wrote: I can see videos.I suppose that it is HTML5 videos,so,isn't the same that flash videos? and can the anonymity be compromised? no, HTML5 videos are not the same as flash videos. The problem with flash videos is not the video itself, it's a problem

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-04-30 Thread krishna e bera
On Tue, 30 Apr 2013 16:03:37 +0100 luis redondo luis.redond...@outlook.com wrote: Using Tor(TBB default configuration,plugins disabled) I can see videos.I suppose that it is HTML5 videos,so,isn't the same that flash videos? and can the anonymity be compromised? HTML5 is much safer than

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-04-30 Thread Praedor Tempus
From: Leo Unglaub l...@leo-unglaub.net To: tor-talk@lists.torproject.org Sent: Tuesday, April 30, 2013 11:53 AM Subject: Re: [tor-talk] HTML5 video and Tor anonymity. Hey, On 2013-04-30 17:03, luis redondo wrote: I can see videos.I suppose

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-04-30 Thread andrew
] HTML5 video and Tor anonymity. Hey, On 2013-04-30 17:03, luis redondo wrote: I can see videos.I suppose that it is HTML5 videos,so,isn't the same that flash videos? and can the anonymity be compromised? no, HTML5 videos are not the same as flash videos. The problem with flash videos

Re: [tor-talk] HTML5 video and Tor anonymity.

2013-04-30 Thread Marco Bonetti
TL;DR: If you're using TBB, you are safe I address this specific problem at DeepSec 2009 with the talk Breaking Tor Sessions with HTML5, at the time it was possible to de-anonimyze a Tor user using the HTML5 video tag together with a specific poster attribute. The idea was to instruct the