On Sun, Jun 29, 2014 at 6:14 PM, <[email protected]> wrote:

> Soul Plane wrote:
> > If you can't do that maybe you could add a warning in the
> > CD, like a warning in a popup that appears briefly the first time the new
> > identity option is used after a boot. "Your new identity could be
> connected
> > to your old identity by a powerful adversary. For more information click
> > here."
>
> It looks like a good idea to push that information to the user if we are
> able to detect that the new identity feature has been used. So I'm
> creating another ticket (but I'm not sure that's possible in the first
> place):
>
> https://labs.riseup.net/code/issues/7471
>

I understand. Thanks for your help however it turns out. I have two more
requests if they make sense.

First how about going to about:blank when I choose a new identity. Now when
I choose the new identity it goes to the Tails homepage. I wonder if that
makes possible some type of tracking analysis. For example I am on a
website have some tcp connections open and I choose new identity, then
those connections immediately die (I assume) and then a connection to the
Tails webpage is made from some other exit node. Maybe that is a way there
could be a correlation tracking a Tails user over identities if an
adversary had a lot of resources? If the browser went to about:blank
instead then some arbitrary time would pass until the user puts in a new
web address, but that would be enough to defeat the attack (if there is
one... I'm speculating). And how about a forced delay? If Tails had it so
Iceweasel randomly generated 0-30 seconds before the new identity was
accessible, to prevent correlation. "To prevent against identity
correlation your new identity will be ready after a delay of N seconds".

Second I don't like that when I choose a new identity my clipboard is
reset. If there is no good reason for that would you consider changing it?

Thanks
_______________________________________________
tails-support mailing list
[email protected]
https://mailman.boum.org/listinfo/tails-support
To unsubscribe from this list, send an empty email to 
[email protected].

Reply via email to