On Tue, Jul 1, 2014 at 2:57 AM, intrigeri <[email protected]> wrote:
> Soul Plane wrote (01 Jul 2014 01:48:19 GMT) :
> > First how about going to about:blank when I choose a new identity. Now
> when
> > I choose the new identity it goes to the Tails homepage. I wonder if that
> > makes possible some type of tracking analysis. For example I am on a
> > website have some tcp connections open and I choose new identity, then
> > those connections immediately die (I assume) and then a connection to the
> > Tails webpage is made from some other exit node. Maybe that is a way
> there
> > could be a correlation tracking a Tails user over identities if an
> > adversary had a lot of resources?
>
> I believe such an adversary has plenty of other ways of finding out
> you're using Tails. I don't think it's part of Tails threat model to
> protect against this kind of adversaries. If you're interested to dig
> further into what exact kind of resources is needed to achieve this
> attack, then I'm happy to think of it more thoroughly.
>
Yes, I'm sure there are ways to do that. I'm interested in an adversary
that can track a user over identity switches. I don't know what kind of
resources would be needed. Some percentage of exit nodes so that over time
there is a chance they are used for both old and new... 10% of exit nodes?
I'm picking an arbitrary number, I have no idea. I assume they can get the
Tails version based on the adblock rules if they are different for each
version, which would narrow it down further.
Anyway, for example:
user_pref("browser.aboutHomeSnippets.updateUrl", "");
user_pref("browser.newtab.url", "about:home");
user_pref("browser.startup.homepage", "about:home");
user_pref("startup.homepage_welcome_url", "https://tails.boum.org/news/";);
or instead of the welcome url:
user_pref("browser.startup.homepage_override.mstone", "0");
user_pref("startup.homepage_override_url", "https://tails.boum.org/news/";);
With those prefs *I think* there would be no immediate outgoing connection
on an identity switch. The Tails news page would only be shown the first
time the browser is started. Again, I don't know if this makes sense or
not, I don't know a lot about your project or Tor. I use Tails from the
Tails CD that I boot every once in a while. Every time I boot the CD and
start Iceweasel I see your news page and would continue to with the prefs
above.
If a user has Tails on a USB drive is their browser profile wiped each
time? With the prefs above would the user see the news page each time the
browser is started? Maybe you want the news to be seen each time the
browser is started, not just the first time. I don't know how to do it so
that the new identity only goes to about:home instead of the startup
homepage (Tails news).
_______________________________________________
tails-support mailing list
[email protected]
https://mailman.boum.org/listinfo/tails-support
To unsubscribe from this list, send an empty email to
[email protected].
