Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-23 Thread gnuser
Thank you for the useful link! Another link inside that page stated that  
javascript could really be used to discover the full path, but as long as  
there is no javascript involved, it should be impossible.

Which I think is the way it should be! ;)

Thanks.


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-17 Thread greatgnu
I'll leave as it is coz editing won't benefit mucho as mailing list and  
shit.. but re-reading "first of all I don't do anything illegal on Internet."  
comes out as very suspicious. Isn't the first thing a drunk man would comment  
'I am never drunk'? Oh shit, now they know, close everything, the plan is  
over, 'vamoose with great importunity' :D


Anyway I just spend some time researching this and this is what I found ->

https://superuser.com/questions/1031501/are-full-paths-kept-private-by-firefox-or-are-they-disclosed-to-websites





Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-17 Thread greatgnu
Well, first of all I don't do anything illegal on Internet.  Second, my user  
name is 'gnu', it always has been and always will be. No need to hide it, on  
the contrary I am very proud of my user name. :P


I can see how this can worry you though. I imagine if this was the case, if  
it was possible for a website to see the path then there would be a warning  
somewhere about this on the torproject.org website. Never allow javascript  
btw. Javascript can and in some cases **will** fingerprint your hardware  
almost uniquely.


I might actually consider changing my user name to 2sexy4u and I might also  
consider going full Muslim, I'm very bored these days.


I see your point, I don't know, I guess it's impossible. How about asking  
this question to someone competent? A tor dev or something?


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-17 Thread greatgnu
nickymate, how about you stick it all into one post? There's no reason to  
flood the forum. :)


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-16 Thread intheforest
ohhh... webmail ha-ha-ha. 


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-16 Thread intheforest

My favorite theme


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-16 Thread intheforest
Not sure what you mean by uploading a file.. If you mean a standard HTML form  
(via your web browser) which enables you to browse for a local file and  
submit/upload it, then the upload will be tunneled through Tor(which I  
recommend you to use) in the same way that downloads are. On the other hand,  
a Flash- or Java-based uploader could potentially bypass your proxy settings  
and break your anonymity (unless you're forcing those plugins through a SOCKS  
tunnel or similar). When in doubt, you should always choose the "basic" or  
HTML-based upload option whenever possible.


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-16 Thread intheforest

I use Tor Browser. :/What browser do you use ? ;)


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-16 Thread intheforest
They don't have to know your username to reveal who you are.. And they don't  
have to know your username to reveal what you like to do while using internet


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-16 Thread intheforest

It simply isn't enough


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-16 Thread intheforest
attack? well, if n* site stores this info, than it is attack on your freedom  
and privacy. If (n1,n2..)* do store this, than they are probably designed to  
*work together* in order to analyze what do you prefer uploading on its  
services and then compromise results by sending this info to advertisers..  
But this is not the worst thing you should be afraid of...   


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-16 Thread gnuser

Actually, wrong.
If the folder from where you make an upload is stolen, it will give away your  
account name. Let's imagine you have made a new account in your Trisquel  
machine, called "2sexy4u" but you are sending a file to a muslim church  
requesting membership. They could, based on the account name realize you are  
a sexy person and refuse you.


Of course I am kidding with the example given, but it still stands that the  
account name (as well as the specific location of the folder) is up for the  
taking. Is it a possible attack?


Thanks


Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-14 Thread greatgnu
I see no point in researching this. Everything I download and upload goes to  
~/Downloads , which is indeed one of the very few folders whitlested in my  
bloatafox firejail profile.





Re: [Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-13 Thread gnuser

If anyone has info on this would be greatly appreciated.
Thanks.


[Trisquel-users] can a website see from which folder firefox uploads a file?

2017-08-10 Thread gnuser
When using webmail or a forum or something like that, we can use an upload  
feature to send a file from our pc to the website. when we do so, the full  
path becomes visible in the "upload from" window in those pages. I was  
thinking, could it be seen by the site? either directly or using a javascript  
attack to record the temporary input in the said window. is that possible?